# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.1.2-4
changelog:
  - Update to 3.1.2-4
  - Resolves: Issue 6489 - After log rotation refresh the FD pointer
  - Resolves: Issue 6554 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)
  - Resolves: Issue 6555 - Potential crash when deleting a replicated backend


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Update to 3.1.3-2
  - Resolves: Issue 5120 - Fix compilation error
  - Resolves: Issue 6782 - Improve paged result locking
  - Resolves: Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN
  - Resolves: Issue 6822 - Backend creation cleanup and Database UI tab error
    handling (#6823)
  - Resolves: Issue 6753 - Add 'add_exclude_subtree' and
    'remove_exclude_subtree' methods to Attribute uniqueness plugin
  - Resolves: Issue 6857 - uiduniq: allow specifying match rules in the
    filter
  - Resolves: Issue 6756 - CLI, UI - Properly handle disabled NDN cache
    (#6757)
  - Resolves: Issue 6854 - Refactor for improved data management (#6855)
  - Resolves: Issue 6850 - AddressSanitizer: memory leak in mdb_init
  - Resolves: Issue 6848 - AddressSanitizer: leak in do_search
  - Resolves: Issue 6865 - AddressSanitizer: leak in agmt_update_init_status
  - Resolves: Issue 6868 - UI - schema attribute table expansion break after
    moving to a new page
  - Resolves: Issue 6859 - str2filter is not fully applying matching rules
  - Resolves: Issue 6872 - compressed log rotation creates files with world
    readable permission
  - Resolves: Issue 6888 - Missing access JSON logging for TLS/Client auth
  - Resolves: Issue 6772 - dsconf - Replicas with the "consumer" role allow
    for viewing and modification of their changelog. (#6773)
  - Resolves: Issue 6893 - Log user that is updated during password modify
    extended operation
  - Resolves: Issue 6901 - Update changelog trimming logging
  - Resolves: Issue 6430 - implement read-only bdb (#6431)
  - Resolves: Issue 6663 - Fix NULL subsystem crash in JSON error logging
    (#6883)
  - Resolves: Issue 6895 - Crash if repl keep alive entry can not be created
  - Resolves: Issue 6884 - Mask password hashes in audit logs (#6885)
  - Resolves: Issue 6778 - Memory leak in
    roles_cache_create_object_from_entry part 2
  - Resolves: Issue 6901 - Update changelog trimming logging - fix tests
  - Resolves: Issue 6181 - RFE - Allow system to manage uid/gid at startup
  - Resolves: Issue 6468 - CLI - Fix default error log level
  - Resolves: Issue 6768 - ns-slapd crashes when a referral is added (#6780)
  - Resolves: Issue 6430 - Fix build with bundled libdb


author: Sandro Bonazzola <sbonazzo@redhat.com> - 0.18.8-1
changelog:
  - Update aide to 0.18.8
  - Update aide to 0.18.8
  - Resolves fedora#2306506
  - GPG verify source tarball
  - Update project URL
  - Remove unused patches
  - Enable check phase during the build
  - Require logrotate


author: Michael Schwendt <mschwendt@fedoraproject.org> - 4.5-2
changelog:
  - obsolete -freeworld package, since it's been a meta-package only
    and currently doesn't pull it any extra packages anymore
  - cleanup: drop old Obs/Conf for -freeworld-mms package


author: Jens Petersen <petersen@redhat.com> - 0.4.2-1
changelog:
  - test for BASH_VERSION to avoid running for other shells
    (#2279643, Nathan Grennan)
  - fix condition regression introduced with 0.4.1 linux console change
  - rename prompt_color_force variable to bash_prompt_color_force


author: Jens Petersen <petersen@redhat.com> - 0.5-1
changelog:
  - require interactive bash session
  - new PROMPT_HIGHLIGHT is appended to PROMPT_COLOR and PROMPT_DIR_COLOR
  - try to use local variables
  - new functions: prompt_setup_color_ps1(), prompt_color(),
    prompt_default_highlight(), prompt_default_color(), prompt_dir_color(),
    prompt_default_format(), prompt_os_color(), prompt_container(),
    prompt_no_color(), prompt_highlight(), prompt_no_highlight(),
    prompt_plain(), prompt_traditional_format(), prompt_reset_traditional_ps1()
  - prompt_os_color() replaces prompt_default_os()
  - prepend hexagon if $container defined
  - for Gnome default PROMPT_HIGHLIGHT=1 for bold prompt (#2293059)


author: Jens Petersen <petersen@redhat.com> - 0.6-1
changelog:
  - add prompt_default_setup() and prompt_default_setup_checked()
  - new: prompt_separator(), prompt_separator_color(), prompt_host_os(),
    prompt_no_userhost(), prompt_container_host(), prompt_git_color()
  - new envvars: PROMPT_CONTAINER, PROMPT_GIT_BRANCH, PROMPT_GIT_COLOR
  - coloring is now inherited from the left:
    PROMPT_HIGHLIGHT -> PROMPT_COLOR -> (PROMPT_SEPARATOR_COLOR) ->
    PROMPT_DIR_COLOR -> (PROMPT_SEPARATOR_COLOR) -> PROMPT_GIT_COLOR
  - PS1 is now generated with m4 expansion


author: Jens Petersen <petersen@redhat.com> - 0.6.1-1
changelog:
  - more consistent separators no longer use PROMPT_HIGHLIGHT
    (prevents separator being bold by default on GNOME)
  - only ANSI reset again after $ prompt if PROMPT_END
  - improve the optional git handling


author: Jens Petersen <petersen@redhat.com> - 0.7-1
changelog:
  - enable bash-color-prompt for most terminals by default (#2352650)
  - respect NO_COLOR unless BASH_PROMPT_USE_COLOR is set (#2352650)
  - check also bash_color_prompt_disable and bash_color_prompt_force


author: Jens Petersen <petersen@redhat.com> - 0.7.1-1
changelog:
  - slightly revert the terminal detection to avoid serial term regressions:
    still setup for COLORTERM but otherwise TERM must be "*color" or "linux"
    (#2352650)


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Hector Martin <marcan@marcan.st> - 2:19.2.3-7
changelog:
  - Work around mgr `restful` module PyO3 failures
  - Fix NOTIFY_TYPES exceptions during module import (rhbz#2361850)


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Günther Deschner <gd@samba.org> - 2:4.22.2-1
changelog:
  - Update to Samba 4.22.2
  - resolves: rhbz#2370468
  - resolves: rhbz#2370455 - Security fix for CVE-2025-0620


author: Jens Petersen <petersen@redhat.com> - 0.7.2-1
changelog:
  - https://hackage.haskell.org/package/fedora-repoquery-0.7.2/changelog
  - warn when no release specified
  - add support for epel10.x minor releases
  - also parse c8s, c9s, c10s
  - use eln via download.fp.o (or dl.fp.o) and drop its channels
  - support short pneumonics for common queryformats (nv,nvr,nvra,envr,envra)


author: Miroslav Suchý <msuchy@redhat.com> 39.1-1
changelog:
  - remove upgrade to F37
  - add upgrade to f39 and remove upgrade to f36
  - add f39 to releasers
  - Speed up selecting retired installed packages
  - Require DNF 5 in Fedora >= 41, not Fedora > 38


author: Miroslav Suchý <msuchy@redhat.com> 41.2-1
changelog:
  - remove-retired-packages: detect removed subpackages
  - no need to check if F41 is prerelease
  - add new line to repoquery to make remove-retired-packages work with dnf5


author: Miroslav Suchý <msuchy@redhat.com> 41.3-1
changelog:
  - correctly detect tmux
  - requires sudo
  - add reverence to `dnf history` in man page
  - add old gpg keys
  - group minimal install does not exist anymore
  - move rawhide version


author: Miroslav Suchý <msuchy@redhat.com> 42.3-1
changelog:
  - add upgrade to Fedora 43
  - remove upgrade to F40 that is EOL
  - typo
  - dnf5 uses /var/cache/libdnf5


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Michal Ruprich <mruprich@redhat.com> - 10.1-4
changelog:
  - Resolves: #2311119 - Multiple AVCs for accessing lib_t in FRR-10.1
  - Resolves: #2311120 - AVCs for using a netlink socket in FRR


author: Jerry James <loganjerry@gmail.com> - 1.9.5-32
changelog:
  - Update to git snapshot for translation updates
  - Update License to LGPL-2.0-or-later AND GPL-2.0-or-later
  - Add a metainfo file
  - Add patches to fix a variety of build issues
  - Add patch to use zlib-ng instead of zlib
  - Numerous spec file updates and cleanups


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.16.0-0.rc7.58]
changelog:
  - rhel/aarch64: enable CONFIG_TCG_ARM_CRB_FFA as a module (Marcin Juszkiewicz)
  - redhat/configs: Move CONFIG_MITIGATION_TSA under common/generic/x86 (Waiman Long)
  - Set CONFIG_TEST_VMALLOC to off for s390 zfcpdump (Justin M. Forbes)
  - Revert "redhat/configs: automotive: Turn off ACPI Processor package for aarch64" (Enric Balletbo i Serra)
  - redhat/configs: automotive: Disable CONFIG_NUMA config (Dorinda Bassey)
  - Consolidate configs to common for 6.16 (Justin M. Forbes)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.16.0-0.rc7.59]
changelog:
  - fedora: minor cleanups (Peter Robinson)
  - fedora: aarch64: enable a couple of brcmstb reset drivers (Peter Robinson)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.16.0-0.rc7.5f33ebd2018c.62]
changelog:
  - redhat/spec: package full bpftool in selftests (Gregory Bell)
  - selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov)
  - redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik)
  - redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik)
  - redhat/spec: Do not use source fortification for C++ selftest binaries (Viktor Malik)
  - redhat/spec: Do not use source fortification for selftests (Viktor Malik)
  - redhat/spec: Fix BPF selftests build with PIE (Viktor Malik)
  - redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov)
  - Linux v6.16.0-0.rc7.5f33ebd2018c


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.16.1-0]
changelog:
  - Enable CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL (Justin M. Forbes)
  - Disable NOVA_CORE (Justin M. Forbes)
  - Turn off libbpf dynamic for perf (Justin M. Forbes)
  - Revert some RHEL only crypto changes (Justin M. Forbes)
  - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Aaron Ma)
  - HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd ICRS/ISUB length (Aaron Ma)
  - Initial setup for stable Fedora releases (Justin M. Forbes)
  - btrfs: fix log tree replay failure due to file with 0 links and extents (Filipe Manana)
  - Reset RHEL_RELEASE for the 6.17 cycle (Justin M. Forbes)
  - redhat/kernel.spec: fix uname_variant call sites (Jan Stancek) [RHEL-104231]
  - redhat/kernel.spec: fix uname_suffix call sites (Jan Stancek) [RHEL-104231]
  - redhat/configs: Add evaluate_configs.py and documentation (Prarit Bhargava)
  - redhat: Remove old evaluate_configs (Prarit Bhargava)
  - Linux v6.16.1


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.5-1
changelog:
  - Update to release v1.31.5
  - Resolves rhbz#2338356
  - Resolves CVE-2024-9042 (a Windows host only bug)
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.6-1
changelog:
  - Update to release v1.31.6
  - Resolves rhbz#2345513
  - Resolves CVE-2025-0426
  - Upstream security and other fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.9-1
changelog:
  - Update to release v1.31.9
  - Resolves rhbz#2366642
  - Upstream fixes
  - Add fedpkg mockbuild artifacts to .gitignore
  - Update template to vendored archive version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.31.12-1
changelog:
  - Update to release v1.31.12
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fix


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.2-1
changelog:
  - Update to release v1.32.2
  - Resolves rhbz#2345513
  - Resolves CVE-2025-0426
  - Upstream security and other fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.6-1
changelog:
  - Update to release v1.32.6
  - Resolves: rhbz#2373848,rhbz#2373847
  - Resolves: CVE-2025-4563
  - Upstream fixes and cleanups


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.32.8-1
changelog:
  - Update to release v1.32.7
  - Resolves: rhbz#2388412
  - Resolves: CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.0-1
changelog:
  - Initial release v1.33.0
  - Resolves: rhbz#2361917
  - Initial release for Kubernetes 1.33.
  - Major changes, updates and fixes; See upstream changelog.
  - Upstream changelog has a 'Must Read' statement


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.1-1
changelog:
  - Update to v1.33.1
  - Resolves: rhbz#2366642
  - Upstream fixes
  - Read upstream changelog for important details if upgrading cluster from
    v1.32.x or earlier.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.4-1
changelog:
  - Update to release v1.33.4
  - Resolves: rhbz#2388412
  - Fixes CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-1
changelog:
  - New upstream stable version 1.56.1
  - Remove upstream ACPI / seabios fixes included in this version.


author: Cole Robinson <crobinso@redhat.com> - 10.6.0-2
changelog:
  - Fix `virsh domifaddr --source=arp` on kernel 6.10 (bz #2302245)
  - Add new systemtap-sdt-dtrace to build deps


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0.0-2
changelog:
  - Fix location of mount, umount (rhbz #2359196)
  - Fix location of numad (rhbz #2359736)
  - Fix tests on rebuild with latest GCC 15


author: Michel Lind <salimma@fedoraproject.org> - 5.4.1-3
changelog:
  - Correctly set the soversion based on SemVer properties
    Backport of upstream PR#4319 from Neal Gompa (ngompa)
  - Split shared libraries into their own -libs subpackage


author: Richard W.M. Jones <rjones@redhat.com> - 2.4.16.3-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Tomas Halman <thalman@redhat.com> - 2.4.16.11-1
changelog:
  Rebase to version 2.4.16.11
  - Resolves: rhbz#2357672 - mod_auth_openidc-2.4.16.11 is available
  - Resolves: CVE-2025-31492 mod_auth_openidc allows
              OIDCProviderAuthRequestMethod POSTs to leak protected data


author: Tomas Halman <thalman@redhat.com> - 2.4.17.2
changelog:
  Rebase to new version, opt in for autorelease and autochangelog
  - Resolves: rhbz#2361581 - mod_auth_openidc-2.4.17.2 is available


author: Packit <hello@packit.dev> - 1.3.0-1
changelog:
  - Cached values of OpenSUSE aliases are used for any exception coming from `opensuse_distro_aliases` to not break a code flow if there is any problem with getting the online ones. (#2548)
  - A couple of other small improvements.
  - Resolves: rhbz#2353174


author: Packit <hello@packit.dev> - 1.5.0-1
changelog:
  - Packit now supports `--base-nvr` option while submitting scans to OpenScanHub. The base nvr is pulled in from koji to perform a differential scan. (#2569)
  - Resolves: rhbz#2356218


author: Packit <hello@packit.dev> - 1.6.0-1
changelog:
  - When using `fast_forward_merge_into`, `version_update_mask` is now correctly being taken into consideration. (#2551)
  - We have introduced a new command group `config` for configuration-related commands and moved `validate-config` command under it, resulting in the new command being `packit config validate`. (#2559)
  - Resolves: rhbz#2357504


author: Packit <hello@packit.dev> - 1.7.0-1
changelog:
  - We have implemented a set of options `osh_options` that allow you to customize OpenScanHub scans via config. (#2570)
  - Resolves: rhbz#2359309


author: Packit <hello@packit.dev> - 1.8.0-1
changelog:
  - You can now validate a Packit config passed to the Packit CLI via a path, e.g., `packit config validate -c /tmp/my-custom-packit-config.yml`. (#2556)
  - The `--resultdir` argument in `build_in_mock` now defaults to the current directory (`"."`), preventing loss of build artifacts when not explicitly set. (#2567)
  - Resolves: rhbz#2365298


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Packit now exposes `specfile_path` as the environment variable `PACKIT_SPECFILE_PATH` for all Packit action hooks to reference from the config. (#2589)
  - We have added a support for passing `upstream_package_name` to the `upstream_tag_template` option. (#2604)
  - Resolves: rhbz#2372314


author: Packit <hello@packit.dev> - 1.10.0-1
changelog:
  - We have fixed a minor bug caused by adding the `PACKIT_SPECFILE_PATH` to the environment of Packit actions. (#2627)
  - We have added a support for ELN aliases in Packit. (#2630)
  - Resolves: rhbz#2372314


author: Packit <hello@packit.dev> - 1.11.0-1
changelog:
  - `packit test` now supports running and validating TMT tests locally without requiring a PR or a release, including result parsing and basic failure reporting. (#2632)
  - Resolves: rhbz#2383891


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.0-1
changelog:
  - buildinstall: Add support for rootfs-type lorax option (lsedlar)
  - scm: Stop trying to download src arch (lsedlar)
  - extra_isos: Provide arch to extra files getter (lsedlar)
  - Move temporary buildinstall download to work/ (lsedlar)
  - Download extra files from container registry (lsedlar)
  - Remove python 2.7 dependencies from setup.py (lsedlar)
  - util: Drop dead code (lsedlar)
  - Directly import mock from unittest (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.1-1
changelog:
  - util: Fix typo in regex for container digests (lsedlar)
  - Resolve container tags to digests (lsedlar)
  - kojiwrapper: Remove unused code (lsedlar)
  - Add basic telemetry support (lsedlar)
  - Reorder ostree and ostree_installer phases (hlin)
  - Fix test data generation script (lsedlar)
  - extra_isos: Mention all extra files in the manifest (lsedlar)
  - scm: Add retries to container-image download (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.2-1
changelog:
  - Drop compatibility with Koji < 1.32 (lsedlar)
  - kiwibuild: Add support for use_buildroot_repo option (lsedlar)
  - gather: Resolve symlinks before linking packages (lsedlar)
  - Make requests instrumentation optional (lsedlar)
  - Fix incorrect log line (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.9.3-1
changelog:
  - Recognize wsl2 images produced by koji (lsedlar)
  - Specify data_files with relative paths (lsedlar)
  - Crossreference `koji_cache` from the Koji cache page (ahills)
  - Add documentation for `koji_cache` configuration (ahills)
  - Record exceptions for top level OTel span (lsedlar)
  - Update spec to match current python packaging guidelines


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.0-1
changelog:
  - Add more tracing to kojiwrapper (lsedlar)
  - phases: implement image-builder (supakeen)
  - Add a tracing span around call to skopeo inspect (lsedlar)
  - Add retries to skopeo inspect calls (lsedlar)
  - otel: Explicitly initialize telemetry provider and tracer (lsedlar)


author: Lubomír Sedlář <lsedlar@redhat.com> - 4.10.1-1
changelog:
  - osbuild: Handle wsl2 images (lsedlar)
  - repoclosure: Clean up cache for dnf5 (lsedlar)
  - Ignore errors for rmtree after archive extraction (dhodovsk)
  - imagebuilder: accept `manifest_type` (supakeen)
  - Add a telemetry span over image building threads (lsedlar)
  - Add specific exception for skopeo copy (lsedlar)


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.2-5
changelog:
  - Drop unused test dependency on deprecated python3-nose
  - https://fedoraproject.org/wiki/Changes/DeprecateNose


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Packit <hello@packit.dev> - 0.32.1-1
changelog:
  - ModemManager: Add initial mock (thanks Guido Günther)
  - bluez5: Add advertising API (thanks Frederik Leonhardt)
  - Fix loading of libglib on macOS (thanks peturingi)


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Packit <hello@packit.dev> - 0.50.2-1
changelog:
  - There is a new method for getting a single commit comment, supporting also retrieval and adding reactions in GitHub. (#865)
  - Resolves: rhbz#2321974


author: Packit <hello@packit.dev> - 0.50.3-1
changelog:
  - We have improved wrapping of the forge-specific exceptions, string representation of the original exception is now included. (#884)
  - The test suite for parsing git URLs has been extended and also the handling of GitHub repository with changed owner or name has been improved. (#874)


author: Packit <hello@packit.dev> - 0.54.0-1
changelog:
  - Support for Forgejo pull requests has been added. (#925)
  - We have added support for Forgejo methods related to permissions. (#918)
  - Resolves: rhbz#2365296


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-3
changelog:
  - Disable network and streaming
  - Enable tests and add extra dependencies
  - Tests expect Debian host with grub-editenv, called grub2-editenv on Fedora


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-4
changelog:
  - Disable 5 tests that does not work on F43/rawhide
  - Update files section with macros and add patch comments


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-5
changelog:
  - Add dbus-common dependency as xml is installed in dbus-1 directory
  - Cleanup patches into 3 logical changes and update upstream status
  - Add upstream status of RPM lint incorrect-fsf-address error


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-6
changelog:
  - Exclude some architectures that does not have grub2-tools-minimal package
  - Add upstream xml file license issue link


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-7
changelog:
  - Change dbus-common dependency from BuildRequires to Requires
  - Update upstream license issue and update license information
  - Generate docbook for yelp or khelpcenter


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-11
changelog:
  - Don't mark man page as doc
  - Update patches against upstream version
  - Yelp SVG image workaround: Convert SVG to PNG using thorvg
  - thorvg workaround due to command rename in F42/F43


author: Bruno Thomsen <bruno.thomsen@gmail.com> - 1.14-12
changelog:
  - Update patch 4 with CC0-1.0.txt and include it in rauc LGPL-2.1-or-later AND CC0-1.0
  - Add COPYING to rauc-doc LGPL-2.1-or-later AND CC0-1.0
  - Fix license as LGPL-2.1-or-later not LGPL-2.1-only


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-3
changelog:
  - Workaround for new gdk-pixbuf with glycin backend dependency (ref: bug
    2387002)
  - F-43: ignore test failure for now


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.3.0-5
changelog:
  - Upstream fix for tests with glycin based gdk-pixbuf2 2.43.x
  - Exclude tests on glycin ppc64le for now (bug 2275913)
  - Exclude animation test on i686 on Fedora 43


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Zdenek Pytela <zpytela@redhat.com> - 41.42-1
changelog:
  - Drop config for /run/random-seed
  - Update file location for systemd random-seed file
  - Allow tomcat execute cracklib-check with a domain transition
  - Allow sssd watch lib dirs
  - Confine systemd-hibernate-resume
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  - Allow login_pgm read filesystem sysctls
  - Allow gconfd connect to system dbus
  - Allow NetworkManager manage NetworkManager_etc_rw_t symlinks
  - Add %verify(not md5 size mtime) for customizable_types


author: Zdenek Pytela <zpytela@redhat.com> - 41.43-1
changelog:
  - Allow nmbd read network sysctls
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Allow logrotate stop all systemd services
  - systemd: rework systemd_manage_random_seed
  - Allow tuned-ppd connect to sssd over a unix stream socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.44-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  - qgs: add contrib module for TDX "qgs" daemon
  - kernel: add interfaces for using SGX enclaves
  - Define file equivalency for /usr/etc
  - Allow mongod to receive pressure stall information
  - Dontaudit systemd_generator read sssd public files
  - Allow plymouthd read/write input event devices
  - Label 99-nvme-nbft-connect.sh with NetworkManager_dispatcher_nvme_script_t
  - Allow systemd-user-runtime-dir sendto to syslogd
  - Remove pcp module
  - Update irqbalance policy for using unconfined scripts
  - Allow utempter use terminal multiplexor
  - Allow virtqemud execute ovs-vsctl with a domain transition
  - Update the files_search_mnt() interface


author: Zdenek Pytela <zpytela@redhat.com> - 41.45-1
changelog:
  - Add fs_write_cgroup_dirs() and fs_setattr_cgroup_dirs() interfaces
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Allow openvswitch ioctl vduse devices
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  - Allow virtstoraged the sys_rawio capability
  - Allow virtqemud read insights-core state files
  - Allow virtnodedev create mdevctl config dirs
  - Allow virtqemud additional permissions on scsi generic chr files
  - Allow local login execute gnome keyring daemon
  - Allow virtqemud send a generic signal to passt
  - Allow svirt-tcg read init state
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  - Label /run/opendkim with dkim_milter_data_t
  - Allow sa-update status systemd services
  - Allow updpwd logging send audit messages
  - Temporary dontaudit iio-sensor-proxy sys_admin.
  - Allow iio-sensor-proxy sendto to journald over a unix datagram socket
  - Revert "Allow iio-sensor-proxy sendto to journald over a unix datagram socket"


author: Zdenek Pytela <zpytela@redhat.com> - 42.1-1
changelog:
  - Update systemd-generators policy
  - Allow plymouthd_t read proc files of systemd_passwd_agent (bsc#1245470)
  - Allow insights-client file transition for files in /var/tmp
  - Allow tuned-ppd manage tuned log files
  - Allow systemd-coredump mount on tmpfs filesystems
  - Update sssd_dontaudit_read_public_files()
  - Allow zram-generator raw read fixed disk device


author: Zdenek Pytela <zpytela@redhat.com> - 42.2-1
changelog:
  - Allow virtqemud_t use its private tmpfs files (bsc#1242998)
  - Allow virtqemud_t setattr to /dev/userfaultfd (bsc#1242998)
  - Allow virtqemud_t read and write /dev/ptmx (bsc#1242998)
  - Extend virtqemud_t tcp_socket permissions (bsc#1242998)
  - Allow virtqemud_t to read and write generic pty (bsc#1242998)
  - Allow systemd-importd create and unlink init pid socket
  - Allow virtqemud handle virt_content_t chr files
  - Allow svirt read virtqemud fifo files
  - All sblim-sfcbd the dac_read_search capability
  - Allow sblim domain read systemd session files
  - Allow sblim-sfcbd execute dnsdomainname
  - Confine nfs-server generator
  - Allow systemd-timedated start/stop timemaster services
  - Allow "hostapd_cli ping" run as a systemd service
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  - Allow 'oomctl dump' to interact with systemd-oomd
  - Basic functionality for systemd-oomd
  - Basic enablement for systemd-oomd
  - Allow samba-bgqd send to smbd over a unix datagram socket
  - Update kernel_secretmem_use()
  - Add the file/watch_mountns permission


author: Zdenek Pytela <zpytela@redhat.com> - 42.3-1
changelog:
  - Allow virtqemud write to sysfs files
  - Allow irqbalance search sssd lib directories
  - Allow samba-dcerpcd send sigkills to passwd
  - Allow systemd-oomd watch dbus pid sock files
  - Allow some confined users read and map generic log files
  - Allow login_userdomain watch the /run/log/journal directory
  - Allow login_userdomain dbus chat with tuned-ppd
  - Allow login_userdomain dbus chat with switcheroo-control
  - Allow userdomain to connect to systemd-oomd over a unix socket
  - Add insights_client_delete_lib_dirs() interface


author: Zdenek Pytela <zpytela@redhat.com> - 42.4-1
changelog:
  - Allow unconfined user a file transition for creating sudo log directory
  - Allow virtqemud read/write inherited dri devices
  - Allow xdm_t create user namespaces
  - Update policy for login_userdomain
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  - Update policy for bootupd
  - Allow logwatch work with opensmtpd
  - Update dovecot policy for dovecot 2.4.1
  - Allow ras-mc-ctl write to sysfs files
  - Allow anaconda-generator get attributes of all filesystems
  - Add the rhcd_rw_fifo_files() interface
  - Allow systemd-coredump the sys_chroot capability
  - Allow hostapd write to socket files in /tmp
  - Recognize /var/home as an alternate path for /home
  - Label /var/lib/lastlog with lastlog_t


author: Zdenek Pytela <zpytela@redhat.com> - 42.5-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  - Support virtqemud handle hotplug hostdev devices
  - Allow virtstoraged create qemu /var/run files
  - Allow unconfined_domain_type cap2_userns capabilities
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  - Remove the mysql module sources
  - dist/targeted/modules.conf: Enable kmscon module (bsc#1238137)
  - Update kmscon policy module to kmscon version 9 (bsc#1238137)
  - Allow login to getattr pidfs
  - Allow systemd to map files under /sys
  - systemd: drop duplicate init_nnp_daemon_domain lines
  - Fix typo
  - Allow logwatch stream connect to opensmtpd
  - Allow geoclue read NetworkManager pid files


author: Zdenek Pytela <zpytela@redhat.com> - 42.6-1
changelog:
  - Allow virtqemud start a vm which uses nbdkit
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  - Fix insights_client interfaces names
  - Add insights_core and insights_client interfaces
  - dist/targeted/modules.conf: enable slrnpull module
  - Allow bootupd delete symlinks in the /boot directory
  - Allow systemd-coredumpd capabilities in the user namespace
  - Allow openvswitch read virtqemud process state
  - Allow systemd-networkd to create leases directory


author: Clark Williams <williams@redhat.com> - 1.19.7
changelog:
  - stalld.c: use a more reasonable size for reading /proc/stat
  - systemd/Makefile:  remove typo in uninstall line
  - Makefile:  change modes on throttled and stalld
  - throttlectl: clean up throttling script due to reported CVE-2024-54159


author: Clark Williams <williams@redhat.com> - 1.19.8
changelog:
  - Fix incorrect DAEMON_UMASK value
  - Add 'errexit' to throttlectl.sh
  - Added glibc41 fix to source tree, removed patch
  - stalld.h:  fix prototype mis-match with cleanup_regex()


author: Clark Williams <williams@redhat.com> - 1.21.1-1
changelog:
  - Makefile:  update version to 1.20.1
  - scripts:  add a script for running a local build for debuggin
  - stalld: Automatically switch to log-only mode if DL-server present
  - bpf/stalld: Implement and use find_queued_task helper in dequeue_task
  - bpf/stalld: Introduce and use for_each_task_entry/for_each_queued_task macros
  - build/debug: Control optimization and debug levels via DEBUG variable
  - stalld: sched_attr: Do not define for glibc >= 2.41
  - stalld: Refactor verbose logging with dedicated macros
  - stalld/queue_track: Consolidate print_queued_tasks verbosity control
  - gitignore: Add common build and tag files
  - build/debug: Allow DEBUG_STALLD to be controlled by 'DEBUG' Makefile variable
  - build/bpf/stalld: Pave way for DEBUG_STALLD command-line override
  - bpf/stalld: Introduce generic 'log' macro for BPF debug prints
  - bpf/stalld: Unify and generalize debug macro to DEBUG_STALLD


author: Clark Williams <williams@redhat.com> - 1.21.2-1
changelog:
  - Makefile: bump version to v1.20.1
  - bpf: Improve task tracking in sched_switch
  - bpf/stalld: Introduce compute_ctxswc helper and update ctxswc on sched_switch


author: Jered Floyd <jered@redhat.com> 10.0.4-1
changelog:
  - Update to upstream 10.0.4
  - Resolves CVE-2024-38311, CVE-2024-56195, CVE-2024-56196, CVE-2024-56202


author: Orion Poplawski <orion@nwra.com> - 10.0.4-4
changelog:
  - Build with system yaml-cpp
  - Add Provides/Requires filtering to exclude internal libraries
  - Add missing bundled provides


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


