# changelog

author: Benjamin A. Beasley <code@musicinmybrain.net> - 20250327-3
changelog:
  - Backport to EPEL10
  - Remove conditionals, Obsoletes, etc. for other releases
  - Work around buildroot-only adobe-mappings-cmap-devel


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.4.5-1
changelog:
  - Starting with Fedora 43, do not build PDF documentation
  - Drop the -doc subpackage (again, starting with Fedora 43)


author: Sandro <devel@penguinpee.nl> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Use upstreamed patch (now applies cleanly)
  - Handle test dependencies using extras
  - Fix %doc file list


author: Michel Lind <salimma@fedoraproject.org> - 0.2.6-1
changelog:
  - Update to 0.2.6 upstream release
  - Drop unneeded extra sources and backported patches
  - Resolves: rhbz#2386020


author: Michel Lind <salimma@fedoraproject.org> - 0.3.2-2
changelog:
  - Disable update_readme_test, brings in additional dependency
  - Ship license text; update doc filenames


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.23.4-2
changelog:
  - Rebuilt with idna 1.x; no longer allow older idna versions
  - Expect maturin to handle license files


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.10.4-2
changelog:
  - Add build conditionals for several extras
  - This allows branching to EPEL10 without some optional dependencies


author: Jerry James <loganjerry@gmail.com> - 1.12-1
changelog:
  - Version 1.12
  - SPDX migration
  - Update home page URL
  - Update python RPM macro usage
  - Automatically generate python BuildRequires


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.3.git91d1781
changelog:
  - remove Provides and Obsolutes, dnf should automatically remove any transient dependencies by itself
  - remove -r option from  macro pyproject_buildrequires
  - use macro %{pyproject_files} and %pyproject_save_files pyliblo3}
  - remove python3 requirements, because the macro %pyproject_buildrequires is used


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2-0.4.git91d1781
changelog:
  - Use correct source tag address
  - Recompile `.pyx` file
  - Fix permission of NEWS README.md and COPYING


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-1
changelog:
  - Add patch `type-erase lo_blob_dataptr input` for _liblo.pyx
  - Add obsolete for older version of pyliblo
  - Add Requires to doc subpackage


author: Martin Gansser <martinkg@fedoraproject.org> - 0.16.2^20240801git91d1781-2
changelog:
  - add python3-pyliblo3 subpackage
  - move 'Obsoletes:' tag to python3-pyliblo3 subpackage
  - move doc subpackage after the python3-pyliblo3 subpackage
  - remove 'Recommends:' tag 
  - rename python-pyliblo3 to python3-pyliblo3
  - remove macro %{modname} for better readability


author: Marie Loise Nolden <loise@kde.org> - 6.8.2.1-2
changelog:
  - fix build due to %cmake macro change after removal of -DLIB_SUFFIX in rawhide
  - prepare documentation build


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.8-7
changelog:
  - Use tomllib instead of toml (used only in tests)
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Scott K Logan <logans@cottsay.net> - 0.9.3-1
changelog:
  - Update to 0.9.3 (rhbz#2241970)
  - Define _description variable to reduce duplication
  - Drop macro from URL to improve ergonomics
  - Use modern Python packaging macros
  - Switch to SPDX license identifier


author: Doğukan Çağatay <dogukan.cagatay@aiven.io> - 0.10.0-9
changelog:
  - Modernize spec file and use pyproject macros
  - Replace %py3_check_import with %pyproject_check_import
  - Simplify package naming by using direct names instead of macros (i.e.
    srcname, slugname)
  - Remove manual file listings that are now handled by %pyproject_files
  - Add comment to specify the version for the existing patch to be deleted
  - Remove explicit runtime pytest dependency which is already handled via
    %pyproject_buildrequires macro


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.16.5-2
changelog:
  - Fix reading numeric array data on big-endian hosts
  - Build on all architectures (arched base package) to help detect any
    future endian-related regressions


author: Packit <hello@packit.dev> - 1.16.6-1
changelog:
  - Update to 1.16.6 upstream release
  - Resolves: rhbz#2275890
  - Splits the examples into a separate subpackage


author: Jerry James <loganjerry@gmail.com> - 1.0.0-1
changelog:
  - Version 1.0.0
  - Drop upstreamed Sphinx 4 patch
  - Convert License tag to SPDX
  - Run the tests now that upstream provides some
  - Add patch for compatibility with Sphinx 7.2.x


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 3.0.0-1
changelog:
  - Update to upstream
  - Disable crypt check. Crypt module has been removed from python3.13,
    repoze-who works well without it and therefore this test is useless
  - Use pytest instead of setup.py test


author: Carl George <carl@george.computer> - 1.0.0-14
changelog:
  - Convert to pyproject macros
  - Rename binary package to follow guidelines
  - Update license field to use SPDX identifier


author: Dan Radez <dradez@redhat.com> - 0.4.0-1
changelog:
  - RHBZ#2284361
    Updating to new upstream project, see comment at
    https://github.com/msabramo/requests-unixsocket/issues/73#issuecomment-2125848213
    Dated: May 22, 2024

    FYI to all: since this project seems to be abandoned, but its longevity is important to my team,
    we've forked the project as requests-unixsocket2. It should be a drop in replacement for this package.

    PyPI: https://pypi.org/project/requests-unixsocket2/0.4.0/
    Repository: https://gitlab.com/thelabnyc/requests-unixsocket2
    We've migrated the fix for this issue there, merged it, and released to PyPI as part of v0.4.0.
  - Updated to pyproject macros


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.1.1-13
changelog:
  - Simplify and reformat the spec file
  - Deconditionalize the tests
  - Stop using the “forge macros,” which don’t contribute much here


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.14.6-15
changelog:
  - Backport to EPEL10
  - Revert "F41+: Use the provisional declarative buildsystem"
  - Allow typing-extensions 4.9.0
  - Disable tests requiring inline-snapshot (all of them, unfortunately)


author: Scott K Logan <logans@cottsay.net> - 0.26.0-1
changelog:
  - Update to 0.26.0 (rhbz#2307470)
  - Switch to pyproject build macros (rhbz#2378179)
  - Add patch for sphinx 8 compatibility (rhbz#2329891)
  - Review SPDX licensing


author: Scott K Logan <logans@cottsay.net> - 1.6.0-1
changelog:
  - Update to 1.6.0 (rhbz#2342035)
  - Drop spec file support for RHEL 7
  - Review SPDX licensing
  - Fix summary on Python 3 subpackage


author: Nils Philippsen <nils@redhat.com> - 0.7.0-1
changelog:
  - Update to 0.7.0
  - Split off man pages for sub-commands
  - Ship scriptlets needed for shell completion


author: Nils Philippsen <nils@redhat.com> - 0.8.0-1
changelog:
  - Update to 0.8.0
  - Update license
  - Make using click, pygit2, rpm Python packages optional and enable
    fallbacks


author: Miro Hrončok <mhroncok@redhat.com> - 2.4.0-8
changelog:
  - Generate BuildRequires dynamically
  - Drop unneeded build dependency on python3dist(toml)
  - Drop duplicate runtime dependency on python3-dateutil


author: Cristian Le <git@lecris.dev> - 0.10.7-3
changelog:
  - Various simplifications
  - Added `Requires: ninja-build` by default
  - Removed `Suggests` and `Recommends`, these are not likely to be used
  - Removed the test conditional for epel10 since everything will be packaged
  - Removed the `pyproject` subpackage since it's empty and all dependents
    are gone


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.0-1
changelog:
  - Create simple CLI tool to examine keycache in Python and refresh all entries in keycache
  - Verify Thread-safe + Unwritable Cache + Negative Cache
  - Revamp Sphinx documentation
  - Patch Enforcer to validate against multiple issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.6-1
changelog:
  - Fix SQL injection risk in KeyCache by using parameterized SQLite queries
  - Prevent sibling-path authorization bypass in Enforcer scope checks


author: Derek Weitzel <dweitzel@unl.edu> - 1.9.7-1
changelog:
  - Remove legacy parent SciToken chaining behavior from token initialization and claim handling
  - Harden Enforcer scope path traversal validation (including encoded traversal checks)
  - Clean up documentation references to parent/chained SciTokens


author: Carl George <carlwgeorge@fedoraproject.org> - 24.2.0-1
changelog:
  - Update to version 24.2.0 rhbz#2258307
  - Remove hatch-fancy-pypi-readme build-system dependency
  - Disable docs when building for RHEL (EPEL)


author: Steve Traylen <steve.traylen@cern.ch> - 1.3.2-1
changelog:
  - Update to version 1.3.2
  - Run tests with tox
  - Use rpmautospec changelog
  - Use forgeurl to get tox.ini file
  - Use more conventional pypi_macro for name
  - Use pyproject_macros
  - Mark license file as license


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2.4.0-19
changelog:
  - Disable tests, which require python-matplotlib, which in turn have an
  extensive list of BRs including tex, xorg-x11-server-Xvfb, inkscape, and
  half a dozen pyton-* pkgs. When all the BRs are satisfied we can enable
  tests again.


author: Packit <hello@packit.dev> - 0.34.2-1
changelog:
  - context_management: add a type stub override to fix typing. Type checkers like mypy and pyright can now correctly determine the types for `.sources()`, `.sections()`, and the other `Specfile` methods that return context managers. (#457)
  - Resolves: rhbz#2344364


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - Added support for creating Specfile instances from file objects and strings. (#458)
  - The `context_management` type stubs now use `ParamSpec` from `typing_extensions` to support Python < 3.10. (#466)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - We have fixed a bug that caused specfile to traceback when section names with conditional macro expansions containing spaces were present in the spec file. (#476)


author: Packit <hello@packit.dev> - 0.38.0-1
changelog:
  - A bug leading to incorrect EVR expansion has been fixed. (#492)
  - Prevented side-effects during condition evaluation that could occur when expanding macros that manipulate other macros, leading to misinterpreted validity of condition branches. (#499)


author: Packit <hello@packit.dev> - 0.40.0-1
changelog:
  - `Specfile()` has a new `sanitize` option that enables best effort sanitization of potentially dangerous constructs such as shell expansions and unsafe Lua macros before they are passed to RPM for parsing. (#519)
  - Fixed incorrect parsing of nested macros. (#522)


author: Packit <hello@packit.dev> - 0.40.2-1
changelog:
  - Trailing whitespaces at the end of specfile sections are now ignored during parsing. (#531)
  - Resolves: rhbz#2461109


author: Packit <hello@packit.dev> - 0.41.0-1
changelog:
  - Fixed an issue where the value of a tag could have been incorrectly expanded if the spec file contained a macro definition shadowing the tag name, e.g.:
  ```
  %global release 12
  %global release_string %{release}%{?dist}
  Release: %{release_string}
  ```
  In this case, with `dist` being `.fc44`, `Specfile.expanded_release` returned `12.fc44.fc44` instead of `12.fc44`. (#539)


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.2.0-0.9.b2
changelog:
  - Unused docs BuildRequires were dropped to remove a dependency loop between
  python-sphinx-theme-builder and python-furo


author: mh <mh+fedora@scrit.ch> - 0.1.8-1
changelog:
  - Update to 0.1.8 (#2169100)
  - remove the upstreamed patch for argparse
  - Require python3-zombie-imp as a stopgap to workaround #2220964


author: Miro Hrončok <mhroncok@redhat.com> - 1.0.6-2
changelog:
  - Remove a patch to drop the runtime dependency on Sphinx
  - It is no longer needed, python3-sphinx-7.2.6-2+ no longer Requires this


author: Benjamin A. Beasley <code@musicinmybrain.net>
changelog:
  - Patch: get iscoroutinefunction() from inspect rather than asyncio
  - Ignore DeprecationWarning about asyncio.set_event_loop from anyio
  - Together, these changes fix RHBZ#2342563


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.0-12
changelog:
  - Fix source archive committed to dist-git
  - Stop pretending we will use this spec file for EPEL7/8
  - Reduce macro indirection in the spec file
  - Drop unnecessary BuildRequires on git
  - Improve the source archive URL
  - Update summary and description from upstream
  - Rename the binary RPM to match the canonical project name
  - Fix incorrect file and directory permissions
  - Build docs as PDF instead of HTML to sidestep most issues with bundling etc.
  - Adjust spec-file whitespace for readability
  - Stop doing coverage analysis
  - Package the changelog
  - Confirm License is SPDX MIT
  - Port to pyproject-rpm-macros


author: Carl George <carl@george.computer> - 3.0.3-1
changelog:
  - Update to version 3.0.3, resolves rhbz#2169878
  - Convert to pyproject macros
  - Add setuptools dependency


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - Use a sandboxed jinja2 environment, CVE-2023-6395


author: Pavel Raiskup <praiskup@redhat.com>
changelog:
  - make the TemplatedDictionary objects picklable
  - use a sandboxed jinja2 environment, fixes CVE-2023-6395


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 2.3.0-1
changelog:
  - Update to 2.3.0 - Closes rhbz#2162954
  - Convert to rpmautospec
  - Adopt pyproject-rpm-macros
  - Change homepage to package defined GitHub's one
  - Enable checks


author: Miro Hrončok <miro@hroncok.cz> - 4.26.0-1
changelog:
  - Update to 4.26.0
  - Requires virtualenv 20.29+
  - Supports freethreading Python
  - Fixes: rhbz#2365939


author: Carl George <carlwgeorge@fedoraproject.org> - 1.1.0-1
changelog:
  - Update to version 1.1.0 rhbz#2192283
  - Switch to automatically generated buildrequires
  - Switch to SPDX license identifier


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.16.0-4
changelog:
  - Remove Conflicts with erlang-dialyzer
  - Since erlang-26.2.5.13-2, python3-typer-cli no longer conflicts with
    erlang-dialyzer; we keep the Conflicts for older versions.


author: Carl George <carlwgeorge@fedoraproject.org> - 0.23.2-1
changelog:
  - Update to version 0.23.2, resolves rhbz#2030302
  - Convert to pyproject macros
  - Switch license field to SPDX identifier
  - Skip tests that fail on Python 3.12


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.34.0-2
changelog:
  - Build for Python 3.14 (fix RHBZ#2372189)
  - Disable uvloop dep., and therefore the "standard" extra, for now
  - Do not error on warnings, as this is too strict and there are new
    DeprecationWarnings
  - Patch test_loop_auto for Python 3.14


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.2.1-4
changelog:
  - backport patch to fix test failures with Python 3.12: AttributeError: type
    object 'VCRHTTPConnection[…]' has no attribute 'debuglevel'


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.28-1
changelog:
  - Update to 0.28
  - Port to pyproject-rpm-macros
  - Add metapackage for “toml” extra
  - License has changed from CC0-1.0 (spec file had Public Domain) to Unlicense
  - Remove obsolete posttrans scriptlet
  - Add details.md to documentation


author: Miro Hrončok <miro@hroncok.cz> - 20.26.6-1
changelog:
  - Update to 20.26.6
  - Fixes: rhbz#2188155
  - Removes support for Python 2.7 virtual environments
  - Removes support for Python 3.6 virtual environments


author: Karolina Surma <ksurma@redhat.com> - 20.31.2-2
changelog:
  - EPEL 10: Add support for Python 3.13
  - Add RPM Requires needed for Python 3.13
  - Search for the wheels in Python version specific directory


author: Davide Cavalca <dcavalca@fedoraproject.org> - 6.0.0-5
changelog:
  - Relax test dependencies
  - relax version pins
  - drop ruff as it's not actually needed
  - drop eventlet as it's been retired


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.4-5
changelog:
  - Security fix for CVE-2025-4574 (fix RHBZ#2366569)
  - The package was rebuilt with rust-crossbeam-channel 0.5.15.


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.8.8-1
changelog:
  - Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065
  - pypi_source constructed manually according to project/name case inconsistency
  - only require legacy-cgi on on systems where it's present
  - remove python3.9 patch (applied upstream)


author: Carl George <carlwgeorge@fedoraproject.org> - 1.8.9-1
changelog:
  - Update to version 1.8.9 rhbz#2325373
  - Port to pyproject macros
  - Remove old provides/obsoletes for python3-webob1.2


author: Brad Bell <bradbell at seanet dot com> - 2024.0.0-1
changelog:
  - New upstream source.
  - pyspellchecker is now available as a fedora package.
  - Remove some extra blank lines.


author: Brad Bell <bradbell at seanet dot com> - 2025.0.2-2
changelog:
  - Change import toml -> import tomli; see
  - https://fedoraproject.org/wiki/Changes/DeprecatePythonToml


author: Jerry James <loganjerry@gmail.com> - 5.0-1
changelog:
  - Version 5.0
  - Convert the License field to SPDX
  - Drop upstreamed patches
  - Simplify with pyproject_save_files


author: Jerry James <loganjerry@gmail.com> - 5.1-1
changelog:
  - Version 5.1 (rhbz#2290844)
  - Add patch for python 3.13 compatibility (rhbz#2280553)
  - Minor spec file cleanups


author: Dominik Mierzejewski <dominik@greysector.net> - 0.23.0-1
changelog:
  - update to 0.23.0 (resolves rhbz#2298052)
  - switch to modern python packaging guidelines
    and automatic BuildRequires generation


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-22
changelog:
  - Ignore signatures made by unknown or disabled algorithms (RHEL-112394)
  - Enable NSS-based user and group lookups again (RHEL-118365)
  - Fix ignored password field if empty in passwd/group file (RHEL-118365)


author: Miro Hrončok <mhroncok@redhat.com> - 23.1.2-6
changelog:
  - Drop no-longer-needed custom changes to /usr/bin/pip*
  - Stop Recommending libcrypt.so.1 on Python 3.12+
  Resolves: rhbz#2150373


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251114git6c77b6b-1
changelog:
  - Update to 0^20251114git6c77b6b
  - `PyConfig_Get()` is also available on Python 3.8
  - Add `PyUnstable_Unicode_GET_CACHED_HASH()` function
  - Add `PyTuple_FromArray()` function


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251015.e510a7b-1
changelog:
  - Update to 0^20251015.e510a7b
  - Add an Epoch since the previous update had the wrong date
  - Switch snapshot info from <date><scm><revision> to <date>.<revision>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:0^20251108.11cb80f-1
changelog:
  - Update to 0^20251108.11cb80f
  - Don’t include structmember.h in pythoncapi_compat.h; avoids conflicts due
    to names without "Py" prefixes.


author: Robert Scheck <robert@fedoraproject.org> - 1.0.0-32
changelog:
  - Updated license identifier to SPDX expression
  - Added missing build dependency on python3-setuptools (#2142035)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-7
changelog:
  - Add id to developer element in AppStream XML metadata
  - Fixes failure to build/validate with appstream 1.0.2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.9.0-8
changelog:
  - Use the autogenerated archive instead of the “release” archive
  - Fixes an obsolete FSF postal address in the license file.
  - Fixes the need to patch in upstream PR#103, which was released


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-9
changelog:
  - Add package to EPEL 9, keep it synched with Fedora Rawhide.
  - Use qemu-kvm package on EPEL.
  - Remove comment about armv7, no longer applicable on Fedora.


author: Richard W.M. Jones <rjones@redhat.com> - 1.1.6-14
changelog:
  - Look for kernels in /lib/modules/*/vmlinuz
  - Display the correct test-suite.log if %check fails
  - Enhance debugging in tests/run-qemu-sanity-check


author: Marie Loise Nolden <loise@kde.org> - 6.6.1-1
changelog:
  - Initial import based on qt5-doc. Simplify and split into qt6-doc,
    qt6-doc-devel (QCH) and qt6-doc-html (only HTML files)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.2-3
changelog:
  - Rework OpenH264 support following Chromium package
  - Backport upstream change for ffmpeg codec selection issues.


author: Zephyr Lykos <fedora@mochaa.ws> - 0.11-1
changelog:
  - New version, switch upstream URL
  - Use CMake to build, remove unused BR
  - Add KDE theming support
  - Remove ExcludeArch s390x


author: Jens Petersen <petersen@redhat.com> - 8.16-1
changelog:
  - Update to 8.16 release
  - https://blog.racket-lang.org/2025/03/racket-v8-16.html
  - drop ppc64le and s390x (#2339005)


author: Peter Bieringer <pb@bieringer.de> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - add BuildRequires: python3-packaging
  - force to use "passlib" instead of "libpass"


author: Robert Scheck <robert@fedoraproject.org> 1.11.2-4
changelog:
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371326, thanks to Marcos Mello)


author: Ben Boeckel <fedora@me.benboeckel.net> - 1.9.4-1
changelog:
  - Update to 1.9.4 (rhbz#2324228)
  - Support Python 3.13 (rhbz#2315724)
  - Update license to GPL-3.0 (no "or later" present in comment headers)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.2-6
changelog:
  - Support rebuilding YAML test data from original sources
  - Don’t do it for now since it brings in extra Perl dependencies, and
    there’s no obvious benefit.


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.3.2-1
changelog:
  - Update to 1.3.2 - Closes rhbz#2331229
  - Drop pod file as man page is now included
  - Drop build section as native extension was removed #1428
  - Add packit configuration
  - Enable tests by skipping three failing tests


author: Paul Howarth <paul@city-fan.org> - 0.998b-17
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    from Fedora 43 onwards


author: Orion Poplawski <orion@nwra.com> - 1.9.0-15
changelog:
  - Add upstream patch to use correct modulus and exponent in
    rdssl_rkey_get_exp_mod
  - Use SPDX license


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2:20250722-1
changelog:
  - Update to 20250722
  - Adjust the version of python3-google-re2 to match the version on PyPI and
    in its metadata; bump Epoch to preserve the upgrade path


author: Ondrej Pohorelsky <opohorel@redhat.com> - 3.7.14-1
changelog:
  - 3.7.14 bump
  - Adds upstream patch to prevent double free
  - Require python3-setuptools unconditionaly
  - Resolves: rhbz#2170818, rhbz#2166136


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-6
changelog:
  - Add forward and backwards weak deps in -gssp subpackage to gnome-shell
  - Remove wrong req. on -kio
  - Let -kio subpackage Supplement kf6-kio-core


author: Terje Rosten <terjeros@gmail.com> - 1.43.5-3
changelog:
  - Add helpers subpackage
  - Add wek deps: conditional recommends on recoll-krunner if
    kf6-krunner is present and corresponding backwards conditional supplements


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 5.6-1
changelog:
  - Adopt Go Vendor Tools and adopt Go Vendor Tools - Closes rhbz#2458183
    rhbz#2435061
  - Use new go2rpm template
  - Change URL to GitLab repo
  - Remove ShellCheck and golint requirements
  - Other misc changes


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.18.0-1
changelog:
  - Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
    rhbz#2350845 rhbz#2348839 rhbz#2331990


author: Graham Leggett <minfrin@sharp.fm> - 1.0.6-1
changelog:
  - Add optional jitter to the delay.
  - Avoid the final delay when running a command a specific number of times.
  - Generate the man page during the dist hook, and not at build time.


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.6-40
changelog:
  - Bump Release to 40 to ensure a working update path. rgb was a separate
    package in xorg-x11-server-utils (not just a Provides) and took the
    Release from that.


author: Kevin Fenzi <kevin@scrye.com> - 1.4.6-31
changelog:
  - Add patch to find systemd-journald config and avoid warning. Fixes rhbz#2361203
  - Add patch to fix false positive on Li0n from bin/sbin merge. Fixes rhbz#2382304


author: Michel Lind <salimma@fedoraproject.org> - 0.46.2-2
changelog:
  - Run autoreconf since the Git tag does not contain configure
  - Use %%conf conditionally if RPM has it defined


author: Remi Collet <remi@remirepo.net> - 0.16.2-3
changelog:
  - add files by license list in package sources
  - open https://github.com/rnpgp/rnp/issues/1932 missing MIT
  - add man pages
  - check archive signature


author: Remi Collet <remi@remirepo.net> - 0.17.0-1
changelog:
  - update to 0.17.0
  - use bundled libsexp
  - add patch to not install static libraries from
    https://github.com/rnpgp/rnp/pull/2071
  - use upstream patch to fix build with GCC 13


author: Remi Collet <remi@remirepo.net> - 0.18.1-1
changelog:
  - update to 0.18.1 for CVE-2025-13402
  - disable gpg check reported as https://github.com/rnpgp/rnp/issues/2375


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.2-1
changelog:
  - Update to 6.4.2
  - Drop patch1 to fix comgr linking, as it's been applied in upstream 6.4.2
  - Make sure 6.4.2 or newer is used for building due to api requirements


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.0-1
changelog:
  - Update to 6.4.0
  - Use version requires to pull in newer packages
  - Fix rpmlint warnings
  - Package is now noarch


author: Tom Rix <Tom.Rix@amd.com> 22-5.rocm7.2.0
changelog:
  - Move building libc++ to --with libcxx option
  - llvm filesystem requires rocm filesystem
  - suse use ldconfig
  - add static provides


author: Tom Rix <Tom.Rix@amd.com> 22-6.rocm7.2.0
changelog:
  - Change define to global build dirs
  - Fix dangling symlinks
  - Fix whitespace
  - Fix py3 shebangs
  - Fix dir ownships


author: Tom Rix <Tom.Rix@amd.com> 22-9.rocm7.2.1
changelog:
  - use suse ldconfig_scriptlets
  - move clang-tidy include dir to filesystem package
  - add static provides for clang runtime
  - Break down amd/ licenses
  - Obsolete libcxx
  - Install license files in more packages


author: Jeremy Newton <alexjnewt at hotmail dot com> - 6.4.2-1
changelog:
  - Update to 6.4.2
  - Rebase patch1
  - Fix some tabs to spaces in the specfile for consistent formatting


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-4
changelog:
  - Exclude tests for Fedora 43+ on s390x that fail due to hardware
    acceleration in the zlib-ng library.


author: Ondřej Nosek <onosek@redhat.com> - 1.68-1
changelog:
  - Restrict Git index version to what GitPython supports (otto.liljalaakso)
  - `set-pagure-token`: config - more restrictive permissions (git)
  - `pre-push-check`: show spectool command output - #732 (onosek)
  - `prep`: added an argument to check dependencies - 585 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - Fix formatting for error when mockbuild sources fails (otto.liljalaakso)
  - `clog` is duplicating changelog lines - 581 (onosek)
  - Fixing unittests for py36 (onosek)
  - `chain-build`: correct the info message - 567 (onosek)
  - Fix regular expression for parsing Source lines - #721 (onosek)
  - Add draft builds support (onosek)
  - Fixing encoding of the url when checking lookaside (onosek)
  - Fix package in Pypi (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: Jens Petersen <petersen@redhat.com> - 0.4.10-1
changelog:
  - Order: add depsPackages and factor out depsGraph to Graph
  - Graph: add depsGraphDeps which takes a list of possible deps
  - Graph: add topsortGraph (factored out of sortGraph)
  - Graph rpmspecDynBuildRequires: error if no srpm generated
  - tests: add testcase for deps command


author: Miroslav Suchý <msuchy@redhat.com> 1.1.9-1
changelog:
  - Add BuildRequire on setuptools to fix distutils error on Python 3.12
  - when package config does not exists use /dev/null instead


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0^20230201gita79b3c3-1
changelog:
  - Repo definitions now split into individual files
  - simplified usage; either pass the distro name or the path to the distro's
    repos
  - rpmdistro-gendnfconf no longer needed for Mageia


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0^20230612gitcf75cee-1
changelog:
  - Update to snapshot from 20230612
  - Add EPEL source repos
  - Also refactor to deduplicate the repo files
  - Add Amazon Linux configuration (2023+)
  - Add CentOS extras repos


author: Tom Callaway <spot@fedoraproject.org> - 2.8.0-1
changelog:
  - update to 2.8.0
  - filter out the "alternative-link-missing" and "alternative-generic-name-not-symlink" checks
    these reflect the OpenSUSE packaging guidelines, but NOT the Fedora ones (bz2208474)


author: Miro Hrončok <mhroncok@redhat.com> - 2.8.0-2
changelog:
  - Filter out cross-directory-hard-link
  - https://fedoraproject.org/wiki/Changes/Hardlink_identical_files_in_packages_by_default
  - Fixes: rhbz#2400621


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.16.4-2
changelog:
  - Make rubygem-minizip testsuite dependency optional, drop on RHEL
    (Patch by Jun Aruga <jaruga@redhat.com>)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 4.0.1-3
changelog:
  - Execute spec test provided by the upstream
  - Backport upstream patch for ruby32 regex issue with hash character


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.3.3-1
changelog:
  - Update to release v1.3.3
  - Resolves: rhbz#2411664, rhbz#2411410, rhbz#2411148
  - Resolves: rbhz#2410768, rhbz#2410512, rhbz#2410233
  - Resolves: rhbz#2409818, rhbz#2409561, rhbz#2409284
  - Resolves: rhbz#2408345, rhbz#2408091, rhbz#2407818
  - Security. Fixes CVE-2025-31133, CVE-2025-52565, CVE-2025-52881
  - Upstream new feature


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.0-4
changelog:
  - Update packit configuration
  - Adds support for go_vendor_archive and go_vendor_license integration with
    packit


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.4.1-1
changelog:
  - Update to release v1.4.1
  - Resolves: rhbz#2447251
  - Adopts go2rpm generates spec file
  - New libpathrs build tag not included as that library is not yet available
    in Fedora


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.5-1
changelog:
  - Update to version 0.5.5; fixes RHBZ#2397644
  - Security fix for CVE-2025-59825 / GHSA-3wgq-wrwc-vqmv


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.9.1-3
changelog:
  - Disable tests in EPEL
  - Avoid bringing in large dependency trees via the axum and tower-http dev-
    dependencies


author: Michel Lind <salimma@fedoraproject.org> - 0.9.0-1
changelog:
  - Update to 0.9.0; Fixes: RHBZ#2347620
  - Disable assertions that fail at certain times of day; Fixes: RHBZ#2338148


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.8.4-1
changelog:
  - Update to version 1.8.4; Fixes RHBZ#2453126
  - Do not expose metapackages for unstable or undocumented features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 4.0.1-1
changelog:
  - Update to 4.0.1 (close RHBZ#2272915)
  - Reduce the debuginfo level as a workaround for very slow test
    compilation.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.5.18-4
changelog:
  - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056
  - Updated the License expression based on a current Rawhide build


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-3
changelog:
  - Enable Unix, ACL, SELinux and systemd-logind features
  - Declare licenses for the uutils-coreutils binary package


author: Michel Lind <salimma@fedoraproject.org> - 0.20.0-2
changelog:
  - Bump termion dependency from 1 to 4 - Change default backend to crossterm
    - Drop ncurses and pancurses backends, ncurses-rs is archived


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.5.0-1
changelog:
  - Initial package (close RHBZ#2328487)
  - Re-generate with rust2rpm 27 for a slightly nicer spec file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1.1-5
changelog:
  - Use upstreamed patch for avoiding icu crate in non-doc tests
  - Fix rust2rpm.toml compatibility with rust2rpm 28


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.16-2
changelog:
  - Don’t mark files included in the library as documentation
  - This affects four Markdown files. Fixes RHBZ#2415111


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.4.1-1
changelog:
  - Update to 0.4.1 (close RHBZ#2277955)
  - Reduce manual editing of the spec file after running rust2rpm
  - Reduce unnecessary (benchmark-only) build dependencies


author: Michel Lind <salimma@fedoraproject.org> - 0.24.4-2
changelog:
  - Incorporate ueno's changes into rust2rpm.toml and regenerate spec
  - Disable probe tests on ppc64le and s390x


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.0-1
changelog:
  - Update to 0.7.0 (close RHBZ#2337404)
  - Patch out optional features that would require blosc2-rs or isal-rs
    crates


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.23.1-1
changelog:
  - Update to 1.23.1 (close RHBZ#2349449)
  - Use rust2rpm.toml to exclude license file for unbundled libdeflate
  - Update .rpmlintrc file


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.24.0-1
changelog:
  - Update to 1.24.0 (close RHBZ#2365609)
  - Now that we can easily re-apply Cargo.toml patches when updating, do not
    use tomcli to remove criterion


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.22.0-2
changelog:
  - Update the rust-image-0.25 patch to match what was merged upstream
  - Fewer image formats are now supported.


author: Michel Lind <salimma@fedoraproject.org> - 0.5.2-4
changelog:
  - Unretire rust-outref as base64-simd needs it; Resolves: rhbz#2426767
  - Spec clean-up; use rust2rpm.toml and a diff file instead of modifying the
    spec directly


author: Benjamin A. Beasley <code@musicinmybrain.net> - 9.1.1-1
changelog:
  - Update to 9.1.1 (close RHBZ#2276572)
  - Replace downstream man page with upstream generated man page


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-1
changelog:
  - Update to version 0.17.0; Fixes RHBZ#2316899
  - Re-enable all tests except test_procinfo, and a couple we had to skip


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.0-2
changelog:
  - Report and skip failing tests on non-x86_64 architectures
  - Fix tests failing to compile on 32-bit architectures


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.8-1
changelog:
  - Update to version 0.8.8; Fixes RHBZ#2311783
  - Add upstream link for fixing mixture of newline styles
  - Backport commit from upstream to fix s390x issues
  - Where possible, patch out "support for common crates" features


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.9-2
changelog:
  - Stop patching out the smallvec-1 feature
  - The uv package needs it, beginning with version 0.5.19.


author: Michel Lind <salimma@fedoraproject.org> - 0.7.0-2
changelog:
  - Undo onig version bump in #7976 and #7973, only needed to match systems
    where oniguruma is newer, but for us we keep onig matched with oniguruma
    already
  - Skip one regex test on EPEL


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.7.5-4
changelog:
  - Re-generate using rust2rpm 27
  - Since it is now easier to re-use a Cargo.toml patch, we use one to remove
    the postcard dev-dependency instead of depending on tomcli.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.8.0-1
changelog:
  - Update to 0.8.0 (close RHBZ#2259758)
  - Patch out the zopfli binary, which conflicts with the one provided by the
    zopfli package


author: Julio González Gil <packages@juliogonzalez.es> - 1.92-1
changelog:
  - Update to 1.92 from https://github.com/s3fs-fuse/s3fs-fuse (#2209081)
    Full changelog: https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.92


author: Julio González Gil <packages@juliogonzalez.es> - 1.95-1
changelog:
  - Update to 1.95 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.95 (#2321940)
    * IMPORTANT: This is the last release supporting CentOS7 or clones
    * Add ipresolve option to select IPv4 or IPv6-only
    * Retry request on HTTP 429 error
    * Fix deadlock in FdManager::ChangeEntityToTempPath
    * Enable static lock checking and fix locking errors
    * Fix use-after-free in FdManager::ChangeEntityToTempPath


author: Julio González Gil <packages@juliogonzalez.es> - 1.96-1
changelog:
  - Update to 1.96 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.96 (#2416816)
    * Require FUSE 3 on Linux
    * Require C++14
    * Improve IO concurrency
    * Rename -o endpoint to -o region for clarity
    * Avoid HeadObject calls with improved stats cache usage


author: Julio González Gil <packages@juliogonzalez.es> - 1.97-1
changelog:
  - Update to 1.97 from https://github.com/s3fs-fuse/s3fs-fuse/releases/tag/v1.97 (#2416816)
    * Bugfix: Do not honor "-o nonempty"


author: Michel Lind <salimma@fedoraproject.org> - 0.9.5-6
changelog:
  - Fix building with gnu-efi 3.0.18
  - Fix building on Fedora 41+ due to OpenSSL engine deprecation
  - Fix building on aarch64, need to use non-TEST_BINARY_FORMAT codepath like x86_64
  - FIxes: RHBZ#2301267


author: Tom Callaway <spot@fedoraproject.org> - 2.2.2-1
changelog:
  - update to 2.2.2
  - fix hardcoded versioning (with sed, not patch)
  - fixup .pc file
  - fix old minimum cmake version which breaks the build


author: Derek Weitzel <dweitzel@unl.edu> - 1.1.2-1
changelog:
  - Turn off CMAKE unity builds
  - Add a mutex around requesting public keys to stop overloading issuers


author: Derek Weitzel <dweitzel@unl.edu> - 1.2.0-1
changelog:
  - Fix segfault if the JSON parser cannot parse the JWKS
  - Fix float time claims issue and improve error handling
  - Fix security issue with malicious issuer handling in error messages
  - Improve JWTVerificationException message to include the invalid issuer
  - Update usage on verify command to make the TOKENFILE explicit
  - Read token for scitokens-verify from stdin
  - Set CURLOPT_NOSIGNAL option in SimpleCurlGet to prevent signal interruptions
  - Adding asan value to the job name
  - Turn off building unit tests by default.
  - Add cmake option SCITOKENS_WITH_ASAN which enables memory checking with the address sanitizer.  Also enable this in CI, so that tests fail if they hit a memory leak or other memory problem.
  - Fix memory leak in store_public_ec_key
  - Fix memory leaks in the unit tests
  - Fix memory leak in rs256_from_coords
  - Fix memory leak in scitokens_verify


author: Brian Bockelman <bbockelman@morgridge.org> - 1.3.0-1
changelog:
  - Add scitokens-generate-jwks CLI for key generation.
  - Add environment variable-based configuration on library initialization.
  - Add per-issuer lock to prevent multiple concurrent queries against issuers without a known key
  - Add negative cache for failed issuer lookups (preventing frequent re-queries)
  - Add monitoring API for per-issuer validation statistics
  - Add optional background thread for JWKS refresh
  - Add keycache load, metadata, and delete APIs
  - Revert "Fix memory leak in rs256_from_coords" by @djw8605
  - Add CTest-based integration test with JWKS server and TLS infrastructure


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.0-2
changelog:
  - Add keycache.allow_in_memory config option with in-memory SQLite fallback
  - Add persistent anchor connection for shared in-memory SQLite database
  - Improve error messages when keycache file cannot be read or written
  - Add integration test for keycache not-writable error message
  - Improve cache directory permission tests to handle common deployment misconfigurations
  - Implement keycache location retrieval and update library to 0.0.3
  - Fix typo in SQLite file extension in integration and main tests


author: Derek Weitzel <dweitzel@unl.edu> - 1.4.1-1
changelog:
  - Fix scope path boundary validation to deny sibling-prefix authorization bypasses
  - Reject parent-directory traversal in scope paths, including encoded traversal forms
  - Add regression tests covering sibling-prefix and traversal authorization checks


author: Jan André Reuter <j.reuter@fz-juelich.de> - 8.4-2
changelog:
  - Fix missing runtime dependency on libunwind-devel (rhbz#2278816)
  - Fix detection of GCC plug-in for GCC 14


author: Jan André Reuter <j.reuter@fz-juelich.de> - 9.0-1
changelog:
  - New version 9.0
  - Require cube >= 4.9
  - Require otf2 >= 3.1
  - Require opari2 >= 2.0.9
  - Drop GCC 14 patch as fixed upstream
  - Add gotcha-devel dependency
  - Remove el7-isms
  - Drop rpath patch


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.20.0-1
changelog:
  - Update to 1.20.0
  - Backport upstream PR for securemode and verifySIGPassword
  - Use standard macros for building and installing


author: Charles R. Anderson <cra@alum.wpi.edu> - 1.20.0-7
changelog:
  - Convert to SPDX license string and add missing licenses
  - Add macros for github owner/project/commit


author: Remi Collet <remi@remirepo.net> - 0.8.4-1
changelog:
  - initial package
  - open https://github.com/rnpgp/sexp/issues/32 build as shared
  - open https://github.com/rnpgp/sexp/issues/33 clarify license


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.1-15
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream:
    https://github.com/bramstein/sfnt2woff-zopfli/pull/20


author: Jens Petersen <petersen@redhat.com> - 0.19.7-25
changelog:
  - https://hackage.haskell.org/package/shake-0.19.7/changelog
  - refresh to cabal-rpm-2.1.0 with SPDX migration


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-1
changelog:
  - Upgrade to SIMDe 0.8.2
    Resolves: rhbz#2251016
  - Use upstream ci.sh
  - Fix build on aarch64 and backport some upstream fixes


author: Dominik Mierzejewski <dominik@greysector.net> - 0.8.2-2
changelog:
  - use upstream PR to fix tests with clang on aarch64
  - switch to noarch for the devel subpackage (tests still run on all arches)


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Stewart Smith <stewart@flamingspork.com> - 2.26-37
changelog:
  - Build with the right LDFLAGS (fixes rpmlint warning about PIE binaries, hardens build)
  - Remove executable bit on man page.


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.71
   - FDE: auto-repair when recovery key is used
   - FDE: revoke keys on shim update
   - FDE: revoke old TPM keys when dbx has been updated
   - FDE: do not reseal FDE hook keys every time
   - FDE: store keys in the kernel keyring when installing from initrd
   - FDE: allow disabled DMA on Core
   - FDE: snap-bootstrap: do not check for partition in scan-disk on
     CVM
   - FDE: support secboot preinstall check for 25.10+ hybrid installs
     via the /v2/system/{label} endpoint
   - FDE: support generating recovery key at install time via the
     /v2/systems/{label} endpoint
   - FDE: update passphrase quality check at install time via the
     /v2/systems/{label} endpoint
   - FDE: support replacing recovery key at runtime via the new
     /v2/system-volumes endpoint
   - FDE: support checking recovery keys at runtime via the /v2/system-
     volumes endpoint
   - FDE: support enumerating keyslots at runtime via the /v2/system-
     volumes endpoint
   - FDE: support changing passphrase at runtime via the /v2/system-
     volumes endpoint
   - FDE: support passphrase quality check at runtime via the
     /v2/system-volumes endpoint
   - FDE: update secboot to revision 3e181c8edf0f
   - Confdb: support lists and indexed paths on read and write
   - Confdb: alias references must be wrapped in brackets
   - Confdb: support indexed paths in confdb-schema assertion
   - Confdb: make API errors consistent with options
   - Confdb: fetch confdb-schema assertion on access
   - Confdb: prevent --previous from being used in read-side hooks
   - Components: fix snap command with multiple components
   - Components: set revision of seed components to x1
   - Components: unmount extra kernel-modules components mounts
   - AppArmor Prompting: add lifespan "session" for prompting rules
   - AppArmor Prompting: support restoring prompts after snapd restart
   - AppArmor Prompting: limit the extra information included in probed
     AppArmor features and system key
   - Notices: refactor notice state internals
   - SELinux: look for restorecon/matchpathcon at all known locations
     rather than current PATH
   - SELinux: update policy to allow watching cgroups (for RAA), and
     talking to user session agents (service mgmt/refresh)
   - Refresh App Awareness: Fix unexpected inotify file descriptor
     cleanup
   - snap-confine: workaround for glibc fchmodat() fallback and handle
     ENOSYS
   - snap-confine: add support for host policy for limiting users able
     to run snaps
   - LP: #2114923 Reject system key mismatch advise when not yet seeded
   - Use separate lanes for essential and non-essential snaps during
     seeding and allow non-essential installs to retry
   - Fix bug preventing remodel from core18 to core18 when snapd snap
     is unchanged
   - LP: #2112551 Make removal of last active revision of a snap equal
     to snap remove
   - LP: #2114779 Allow non-gpt in fallback mode to support RPi
   - Switch from using systemd LogNamespace to manually controlled
     journal quotas
   - Change snap command trace logging to only log the command names
   - Grant desktop-launch access to /v2/snaps
   - Update code for creating the snap journal stream
   - Switch from using core to snapd snap for snap debug connectivity
   - LP: #2112544 Fix offline remodel case where we switched to a
     channel without an actual refresh
   - LP: #2112332 Exclude snap/snapd/preseeding when generating preseed
     tarball
   - LP: #1952500 Fix snap command progress reporting
   - LP: #1849346 Interfaces: kerberos-tickets |  add new interface
   - Interfaces: u2f | add support for Thetis Pro
   - Interfaces: u2f | add OneSpan device and fix older device
   - Interfaces: pipewire, audio-playback | support pipewire as system
     daemon
   - Interfaces: gpg-keys | allow access to GPG agent sockets
   - Interfaces: usb-gadget | add new interface
   - Interfaces: snap-fde-control, firmware-updater-support | add new
     interfaces to support FDE
   - Interfaces: timezone-control | extend to support timedatectl
     varlink
   - Interfaces: cpu-control | fix rules for accessing IRQ sysfs and
     procfs directories
   - Interfaces: microstack-support | allow SR-IOV attachments
   - Interfaces: modify AppArmor template to allow snaps to read their
     own systemd credentials
   - Interfaces: posix-mq | allow stat on /dev/mqueue
   - LP: #2098780 Interfaces: log-observe | add capability
     dac_read_search
   - Interfaces: block-devices | allow access to ZFS pools and datasets
   - LP: #2033883 Interfaces: block-devices | opt-in access to
     individual partitions
   - Interfaces: accel | add new interface to support accel kernel
     subsystem
   - Interfaces: shutdown | allow client to bind on its side of dbus
     socket
   - Interfaces: modify seccomp template to allow pwritev2
   - Interfaces: modify AppArmor template to allow reading
     /proc/sys/fs/nr_open
   - Packaging: drop snap.failure service for openSUSE
   - Packaging: add SELinux support for openSUSE
   - Packaging: disable optee when using nooptee build tag
   - Packaging: add support for static PIE builds in snapd.mk, drop
     pie.patch from openSUSE
   - Packaging: add libcap2-bin runtime dependency for ubuntu-16.04
   - Packaging: use snapd.mk for packaging on Fedora
   - Packaging: exclude .git directory
   - Packaging: fix DPKG_PARSECHANGELOG assignment
   - Packaging: fix building on Fedora with dpkg installed


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.72
   - FDE: support replacing TPM protected keys at runtime via the
     /v2/system-volumes endpoint
   - FDE: support secboot preinstall check fix actions for 25.10+
     hybrid installs via the /v2/system/{label} endpoint
   - FDE: tweak polkit message to remove jargon
   - FDE: ensure proper sealing with kernel command line defaults
   - FDE: provide generic reseal function
   - FDE: support using OPTEE for protecting keys, as an alternative to
     existing fde-setup hooks (Ubuntu Core only)
   - Confdb: 'snapctl get --view' supports passing default values
   - Confdb: content sub-rules in confdb-schemas inherit their parent
     rule's "access"
   - Confdb: make confdb error kinds used in API more generic
   - Confdb: fully support lists and indexed paths (including unset)
   - Prompting: add notice backend for prompting types (unused for now)
   - Prompting: include request cgroup in prompt
   - Prompting: handle unsupported xattrs
   - Prompting: add permission mapping for the camera interface
   - Notices: read notices from state without state lock
   - Notices: add methods to get notice fields and create, reoccur, and
     deepcopy notice
   - Notices: add notice manager to coordinate separate notice backends
   - Notices: support draining notices from state when notice backend
     registered as producer of a particular notice type
   - Notices: query notice manager from daemon instead of querying
     state for notices directly
   - Packaging: Ubuntu | ignore .git directory
   - Packaging: FIPS | bump deb Go FIPS to 1.23
   - Packaging: snap | bump FIPS toolchain to 1.23
   - Packaging: debian | sync most upstream changes
   - Packaging: debian-sid | depends on libcap2-bin for postint
   - Packaging: Fedora | drop fakeroot
   - Packaging: snap | modify snapd.mk to pass build tags when running
     unit tests
   - Packaging: snap | modify snapd.mk to pass nooptee build tag
   - Packaging: modify Makefile.am to fix snap-confine install profile
     with 'make hack'
   - Packaging: modify Makefile.am to fix out-of-tree use of 'make
     hack'
   - LP: #2122054 Snap installation: skip snap icon download when
     running in a cloud or using a proxy store
   - Snap installation: add timeout to http client when downloading
     snap icon
   - Snap installation: use http(s) proxy for icon downloads
   - LP: #2117558 snap-confine: fix error message with /root/snap not
     accessible
   - snap-confine: fix non-suid limitation by switching to root:root to
     operate v1 freezer
   - core-initrd: do not use writable-paths when not available
   - core-initrd: remove debian folder
   - LP: #1916244 Interfaces: gpio-chardev | re-enable the gpio-chardev
     interface now with the more robust gpio-aggregator configfs kernel
     interface
   - Interfaces: gpio-chardev | exclusive snap connections, raise a
     conflict when both gpio-chardev and gpio are connected
   - Interfaces: gpio-chardev | fix gpio-aggregator module load order
   - Interfaces: ros-snapd-support | grant access to /v2/changes
   - Interfaces: uda-driver-libs, egl-driver-libs, gbm-driver-libs,
     opengl-driver-libs, opengles-driver-libs | new interfaces to
     support nvidia driver components
   - Interfaces: microstack-support | allow DPDK (hugepage related
     permissions)
   - Interfaces: system-observe | allow reading additional files in
     /proc, needed by node-exporter
   - Interfaces: u2f | add Cano Key, Thesis FIDO2 BioFP+ Security Key
     and Kensington VeriMark DT Fingerprint Key to device list
   - Interfaces: snap-interfaces-requests-control | allow shell API
     control
   - Interfaces: fwupd | allow access to Intel CVS sysfs
   - Interfaces: hardware-observe | allow read access to Kernel
     Samepage Merging (KSM)
   - Interfaces: xilinx-dma | support Multi Queue DMA (QDMA) IP
   - Interfaces: spi | relax sysfs permission rules to allow access to
     SPI device node attributes
   - Interfaces: content | introduce compatibility label
   - LP: #2121238 Interfaces: do not expose Kerberos tickets for
     classic snaps
   - Interfaces: ssh-public-keys | allow ro access to public host keys
     with ssh-key
   - Interfaces: Modify AppArmor template to allow listing systemd
     credentials and invoking systemd-creds
   - Interfaces: modify AppArmor template with workarounds for Go 1.35
     cgroup aware GOMAXPROCS
   - Interfaces: modify seccomp template to allow landlock_*
   - Prevent snap hooks from running while relevant snaps are unlinked
   - Make refreshes wait before unlinking snaps if running hooks can be
     affected
   - Fix systemd unit generation by moving "WantedBy=" from section
     "unit" to "install"
   - Add opt-in logging support for snap-update-ns
   - Unhide 'snap help' sign and export-key under Development category
   - LP: #2117121 Cleanly support socket activation for classic snap
   - Add architecture to 'snap version' output
   - Add 'snap debug api' option to disable authentication through
     auth.json
   - Show grade in notes for 'snap info --verbose'
   - Fix preseeding failure due to scan-disk issue on RPi
   - Support 'snap debug api' queries to user session agents
   - LP: #2112626 Improve progress reporting for snap install/refresh
   - Drop legacy BAMF_DESKTOP_FILE_HINT in desktop files
   - Fix /v2/apps error for root user when user services are present
   - LP: #2114704 Extend output to indicate when snap data snapshot was
     created during remove
   - Improve how we handle emmc volumes
   - Improve handling of system-user extra assertions


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.74.1
   - FDE: measure DeployedMode and AuditMode variables if they appear
     as disabled in the event log to avoid a potential reseal-failure
     boot loop
   - LP: #2139611 FDE: fix db updates by allowing multiple payloads
   - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising
     memory lock limit when required
   - LP: #2139099 snap-confine: bump the max element count of the BPF
     map used to store IDs of allowed/matched devices to 1000
   - Interfaces: Added pidfd_open and memfd_secret to seccomp template
   - Interfaces: camera | add locking permission for /dev/video


author: Ernest Lotter <ernest.lotter@canonical.com>
changelog:
  - New upstream release 2.76
   - assertions: add helper for validating integrity data
   - assertions: drop incorrect/non-standard Ed25519 support
   - confdb: allow only API admin read access to confdb secrets
   - confdb: block concurrent confdb accesses
   - confdb: block concurrent snapctl accesses to configuration
     database
   - confdb: check for ephemeral data when missing save-view hook on
     commit
   - confdb: ignore not-found errors in confdb-schema refreshes
   - confdb: support --wait-for timeouts when accessing confdb
   - core-initrd: add group referenced in udev rules
   - core-initrd: add libbpf dependency to initramfs
   - core-initrd: add missing libbpf dependency in 24.04 packaging
   - core-initrd: ensure audio is a system group
   - core-initrd: fix /boot/uboot mount with u-boot env in dedicated
     partition
   - core-initrd: increase mount burst from 5 to 128 for faster boot
   - core-initrd: sync partition udev rules with the ones in core-base
   - core-initrd: sync with latest upload to snappy-dev PPA
   - core-initrd: synchronize changelogs with latest PPA upload
   - core-initrd: update changelog with latest PPA upload
   - LP: #2150773 core-initrd: add nfnetlink module to fix nf netlink
     socket speed regression (Ubuntu Core only)
   - cross-distro: allow snapd to manipulate systemd unit files in
     SELinux policy
   - cross-distro: FIPS bootstrap and dispatch via snap-fips-dispatch
   - desktop: fix common ID selection with multiple desktop plugs
   - FDE: allow user mode on core in secboot TPM handling
   - FDE: bump go-efilib dependency
   - FDE: bump secboot to rev cdcb64992e54 for FDE fixes
   - FDE: deprecate check-pin/passphrase API endpoints
   - LP: #2147606 FDE: give inactive state on classic
   - FDE: improve tracing for OP-TEE probing
   - FDE: move auto-repair logic to overlord/fdestate and provide state
   - FDE: update secboot for TPM/FDE bug fixes including Intel HAP and
     recovery key parsing
   - FDE: use any primary key matching digest when adding a keyslot
   - FDE: use ignore action for preinstall check in VM
   - interfaces: bluez | drop explicit deny send_destination in D-Bus
     configuration
   - interfaces: conditionally deny /proc/self/mountinfo to suppress Go
     1.25+ denials
   - interfaces: custom-device | fix for-device validation panic on
     non-string value
   - interfaces: disallow auto-connect to parallel installs
   - interfaces: docker | make plug implicit on classic systems
   - interfaces: ignore errors in disconnect hooks during explicit snap
     disconnect
   - interfaces: mediatek-accel | add plug interface base declaration
   - interfaces: microceph-support | suppress noisy sudo denial audit
     logs
   - interfaces: podman | add new interface for podman socket access
   - interfaces: pulseaudio | fix security tag syntax inconsistency
   - interfaces: raw-usb | allow USB device enumeration on Fairphone 5
     with NexDock
   - interfaces: restore auto-connections on failed refresh undo
   - LP: #2148544 interfaces: bool-file | support deep SoC sysfs paths
     for LED brightness
   - LP: #2139213 packaging: make Ubuntu 16.04 packaging dep17
     compliant
   - packaging: add cross-distro build script and instructions
   - packaging: add openSUSE 16.0 spread support
   - packaging: Debian build improvements
   - packaging: default openSUSE to /var/lib/snapd/snap and sync from
     downstream
   - packaging: drop transitional packages only for Ubuntu 26.04
     (Resolute)
   - packaging: fix Launchpad FIPS build detection for snapd-fips job
   - packaging: refactor and clean up snapd.mk, standardize test-data
     directories
   - packaging: switch to golang-github-chai2010-gettext-go-dev
   - packaging: update bundled AppArmor 4.1.7 (snapd snap only)
   - prompting: escape paths in prompt constraints
   - prompting: improve API error handling and validation
   - prompting: improve error message when no handler service is
     present
   - prompting: re-enable the prompting notice backend
   - prompting: respond with full user-allowed permission set
   - prompting: validate permissions while unmarshalling
   - remote device management: implement dispatch-mgmt-messages task
     with sequencing support
   - LP: #2125344 snap: avoid empty channel forwarding message
   - LP: #2150683 snap: clarify snap install help text for --classic
     and --devmode
   - LP: #2152908 snap: print complex attributes in snap interface
     --attrs output
   - snap: add run-inhibit hint and inhibit info when a snap is
     disabled
   - snap: allow removing a snap and its base at the same time
   - snap: display detailed component information in snap info
   - snap: extend AlreadyInstalledError to multiple snaps and
     components
   - snap: extend set-quota command options description with accepted
     value formats
   - snap: implement snap delta command for computing snap deltas
   - snap: improve consistency for snap install when some snaps are
     already installed
   - snap: show hint in snap list that a snap has components
   - snap-confine: allow inheriting unix sockets from snaps
   - snap-confine: allow linking to libm in AppArmor profile
   - snap-confine: fix out-of-bounds read in mountinfo parser for
     partial escape sequences
   - snap-confine: harden bpffs mount with nosuid, nodev, noexec flags
   - snap-confine: remove experimental persistent per-user mount
     namespace feature
   - snap-confine: set FD_CLOEXEC on file descriptors returned by BPF
     helpers
   - snap-confine: support transparent_hugepage in AppArmor profile
   - snap-confine: use strchr after NUL-terminating in infofile parser
   - snap-update-ns: switch to a multi-pass process for constructing
     and updating mount namespaces
   - RemoveMountUnitFile now unmounts even if mount unit file is
     missing
   - Add explicit mount phase during single-reboot refresh to fix undo
     of kernel refreshes
   - Add security audit logging subsystem
   - Add base prioritized AppArmmor snippets for strictly confined or
     jailed snaps
   - Allow openshell snap to use experimental daemon-scope: user
   - Allow configuring mount unit options based on filesystem type
   - Allow equals signs in uevent values in netlink parser
   - Also bind-mount directories modified by kmod backend during
     preseed
   - Clean up potentially corrupted files during snap download undo
   - Complete the bootloader environment implementation
   - Copy integrity data files during snap install
   - Create hook for seed refresh mode
   - Create removal tasks for old seed-refresh seeds
   - Dispatch systemctl commands asynchronously when calling Stop()
   - Ensure /tmp/.X11-unix created inside mount namespace has correct
     permissions
   - Ensure exclusive changes conflict with refresh/revert
   - Ensure existing snap confinement flags are not dropped when
     installing or removing components
   - Export ubuntu-boot-state filename constant from bootloader package
   - Fix duplicate removal of apps under $SNAP_MOUNT_DIR/bin
   - Fix integration between prerequisites task and seed-refresh mode
   - Fix split-refresh overwriting provided lane
   - Fix use of umask in GetListener for socket activation
   - Ignore net.ErrClosed during daemon shutdown
   - Implement ResolveValidationSetsEnforcementError in terms of one
     call
   - Improve snapctl install consistency when components are already
     installed
   - Inject seed creation tasks into snap refresh flow
   - Introduce system options for custom certificates on Ubuntu Core
   - Keep idle services with activation units stopped on reload
   - List snap components in snap-debug-info via debug-tools
   - Look at gadget.yaml instead of marker file to determine ubootpart
     usage
   - LP: #1966067 Skip redundant xdg-settings confirmation prompt when
     setting is already correct
   - LP: #2110368 Fix component installation for private snaps via
     snapctl
   - LP: #2110368 Fix download of private snap components by setting
     UserID
   - LP: #2144666 Fix mount namespace updates with synthetic bind
     mounts on same target paths
   - LP: #2146337 Improve handling of failed downloads and retain
     partial files for resume
   - LP: #2147207 Fix snap enable/disable cycle forgetting components
   - Make run-inhibit hint for kill-snap-apps task based on kill reason
   - Merge content-provider prerequisite updates into seed-refresh
   - Move SortServices into Backend.StartServices
   - Move state to client change conversion to ctlcmd package
   - Omit misleading "try to refresh snapd" suggestion for ISA-related
     errors
   - Only create link-component tasks when needed during refresh to
     existing revision
   - Reconfigure piboot bootloader on gadget refreshes to preserve
     os_prefix
   - Reduce the number of AppArmor profile regenerations during snap
     operations
   - Refactor seed-refresh ownership to devicestate
   - Regenerate certificate database on remodels
   - Remove obsolete FIXME comment in VersionCompare
   - Remove unused GenerateDmVerityData helper from snap/integrity
   - Rename and document error type for ISA assumes flags
   - Restart snapd from daemon.Stop to improve restart reliability
   - Restart stopped services on error in stopSnapServices for
     transactionality
   - Simplify certificate-db updates on model-base refresh/installs
   - Support racing Loop and Stop correctly in overlord
   - Support sending file descriptors to systemd via sd_notify
   - Unroll CPU-heavy recursive function in snap state handlers
   - Update seccomp syscalls list for kernel 7.1.0
   - Use change ID to prevent nested seed-refresh spawned by
     prerequisites
   - Validate content interface plug target directories exist for
     core26+ snaps
   - Validate layout paths exist in snap tree for snaps using bare or
     core26+


author: Paul Howarth <paul@city-fan.org> - 0.4.0-30
changelog:
  - Drop EL-7 support
  - Drop homedir fix for upgrades from packages built in 2009 and earlier
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    (from F-43 onwards)


author: Robert Scheck <robert@fedoraproject.org> 4.00-4
changelog:
  - Remove retired iXhash blacklists from default configuration
    and provide only example configuration (#2345751, #2346368)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.9.3-14
changelog:
  - Remove macros obsolete in Fedora
  - Use CMake RPM macros to build and install
  - Build and run the tests
  - Do not glob over the .so version
  - Test with the system gtest instead of the bundled one


author: Filipe Rosset <filiperosset@fedoraproject.org> - 2.3.1-1
changelog:
  - rebuilt for version 2.3.1 fixes rhbz#1856025 rhbz#2454296 rhbz#2128374
  - modernized packaging, enabled generator, templates, and libev support


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20251025gitf1c79c0-2
changelog:
  - Patch two newly-reported memory-safety bugs in stb_image
  - https://github.com/nothings/stb/issues/1860
  - https://github.com/nothings/stb/issues/1861


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0^20260313git904aa67-2
changelog:
  - Fix access/use of uninitialized memory in stb_image
  - This was undefined behavior, and could leak security-relevant information
    from other data structures. See
    https://github.com/nothings/stb/issues/1929.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 17.1-1
changelog:
  - Update to 17.1 (close RHBZ#2356072)
  - The ppc64le version of Stockfish now uses VSX extensions (POWER8)


author: Paul Wouters <paul.wouters@aiven.io> - 5.9.14-1
changelog:
  - Resolves: rhbz#2254560 CVE-2023-41913 buffer overflow and possible RCE
  - Resolved: rhbz#2250666 Update to 5.9.14 (IKEv2 OCSP extensions, seqno/regno overflow handling
  - Update to 5.9.13 (OCSP nonce set regression configuration option charon.ocsp_nonce_len)
  - Update to 5.9.12 (CVE-2023-41913 fix, various IKEv2 fixes)


author: Jerry James <loganjerry@gmail.com> - 1.4.3-1
changelog:
  - Version 1.4.3
  - python-iso8601 is no longer bundled in python3-subunit
  - perl support has moved to https://github.com/jelmer/subunit-perl


author: Attila Kovacs <attipaci@gmail.com> - 1.5.0-1
changelog:
  - Upstream v1.5.0, and streamlined package structure - Switched to CMake
    for the build - devel sub-package now includes CMake / pkgconfig
    configurations - No longer includes cio-data subpackage (no longer needed
    or used) - No longer includes legacy solsys1 / solsys2 ubpackages


author: Jason Taylor <jtfas90@proton.me> 8.0.1-1
changelog:
  - Migrate to 8.0.x release
  - Addresses CVE-2025-59147, CVE-2025-59148
  - Addresses CVE-2025-59149, CVE-2025-59150
  - removed libprelude references as it is orphaned
  - removed suricatasc python patch, suricatasc has been migrated to rust
  - removed references to legacy C based libhtp, libhtp has been migrated to rust


author: Ron Olson <tachoknight@gmail.com> 5.8.1-6
changelog:
  - Made 5.8.1 work for EPEL 10 as it is the last version of
    Swift that could be built without another version of
    Swift being present


author: Ron Olson <tachoknight@gmail.com> - 6.0.2-1
changelog:
  - Updated to Swift 6.0.2-RELEASE
    Resolves: rhbz#2291122
    Resolves: rhbz#2322729
    Resolves: rhbz#2324076


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-4
changelog:
  - Tidy up BuildRequires/Requires
  - BR: tzdata, which is not pulled from dependencies on F39+ (RHBZ#2261742)


author: Xavier Bachelot <xavier@bachelot.org> 6.2.72-5
changelog:
  - Drop EL7 support
  - Fix filter ordering
  - Fix httpd config needed after httpd fix for CVE-2024-38477 (RHBZ#2307179)


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.74-1
changelog:
  - Update to 6.2.74, fix for CVE-2024-55919
    - Full changelog: https://github.com/sympa-community/sympa/releases/tag/6.2.74


author: Michal Schorm <mschorm@redhat.com> - 6.2.76-1.3
changelog:
  - Rebuild without i686 architecture - MySQL 8.4 no longer supports it,
    so perl-DBD-MySQL no longer builds it


author: Xavier Bachelot <xavier@bachelot.org> - 6.2.78-1
changelog:
  - Update to 6.2.78
  - Turn conf sub-packages to noarch
  - Disable some SUID wrappers
  - Drop now useless cookie parameter creation on first install
  - Simplify initial conf creation
  - Install systemd drop-ins in %{_unitdir} (RHBZ#2415142)


author: Jerry James <loganjerry@gmail.com> - 1.13.0-1
changelog:
  - Version 1.13.0
  - Drop unnecessary circuitplot patch
  - Drop upstreamed incompatible-pointer patch
  - Link duplicate documentation files
  - Run tests on all architectures


author: Jerry James <loganjerry@gmail.com> - 1.14.0-1
changelog:
  - Version 1.14.0
  - Drop upstreamed tempfile flush patch
  - Add patch to avoid intersphinx_registry
  - Drop workaround for buggy lark on ppc64le
  - Drop examples subpackage


author: Xavier Bachelot <xavier@bachelot.org> 1.0.20-11
changelog:
  - Fix build on EL9
  - egrep is deprecated, use grep -E instead in order to fix build on F38+
  - Drop conditionals for EL6


author: Peter Czanik <peter@czanik.hu> - 4.8.1-1
changelog:
  - update to 4.8.2, a bug fix release
  - fixes an inproper certificate validation problem (CVE-2024-47619)
  - fixes elasticsearch-http() and other drivers after a backwards
    incompatible fix in format-json
  - reliability and performance improvements in the S3 destination


author: Scott K Logan <logans@cottsay.net> - 0.8.90-32
changelog:
  - Fix svg2png.sh permissions after build
  - Review SPDX license identifier
  - Switch to %license macro


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.9.6-0.1
changelog:
  - Snapshot of upcoming upstream release 0.9.6
  - New upstream source at github
  - Removed patches and hacks merged upstream
  - Installs a default systemd unit tayga.service that points to a default config
    (similar to Debian and upstream)
  - Pulled support for older EL releases


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Than Ngo <than@redhat.com> - 20200406-35
changelog:
  - fixed rhbz#2284575, add texlive-mdframed
  - fixed rhbz#2275109, add texlive-picinpar
  - add texlive-selinput, texlive-lipsum, texlive-picture, texlive-kantlipsum, texlive-ntheorem


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Fix missing texlive-ms that is splitted into multitoc and count1to
  - Fix Requirement on texlive-base, texlive-kpathsea
  - Remove texlive-sfmath as it's part of texlive-2024


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to version 1.11.1 rhbz#2220885
  - Switch to SPDX license identifier and mark license file appropriately
  - Use upstream default config file with minimal changes
  - Log to journal instead of files
  - Run daemon in foreground to remove the need for pidfile tracking


author: Carl George <carlwgeorge@fedoraproject.org> - 1.11.2-7
changelog:
  - Backport upstream CVE fixes
  - Fixes CVE-2026-3945
  - Fixes CVE-2026-31842
  - Run upstream test suite


author: Dominik Mierzejewski <dominik@greysector.net> - 2.6.2-28
changelog:
  - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718)
  - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462
    (rhbz#2254376, rhbz#2254381)
  - fix incorrect text element encoding (upstream isssue #51)
  - compile and run tests


author: Didier Fabert <didier.fabert@gmail.com> - 0.1-35.20171025gitab9bbbd
changelog:
  - Stop using deprecated py3_build/py3_install macros https://bugzilla.redhat.com/show_bug.cgi?id=2378474
  - migrated to last commit


author: Marcel Härry <mh+fedora@scrit.ch>- 0.4.8.21-2
changelog:
  - Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
  - Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.4.9.5-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
  - Enable seccomp on aarch64, which is now supported


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.6-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386


author: Marcel Härry <mh+fedora@scrit.ch> - 0.4.9.8-1
changelog:
  - Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
  - Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
  - Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
  - Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
  - Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
  - Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
  - Fix CVE-2026-44602 (bz#2467718 / nz@2467717)


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-1
changelog:
  - Bump to v1.0.2
  - Update license
  - Add svg icon
  - Use appstream id for icons, desltop and metainfo files


author: Ivan Romanov <drizt72@zoho.eu> - 1.0.2-2
changelog:
  - Add patch to fix epel building
  - Drop Qt4 support
  - Update description
  - Use specific macros for metainfo dir


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Permit dnf4 to check for reboot with non-root user (riehecky@fnal.gov)
  - Add --reboot-only filter (riehecky@fnal.gov)


author: Enric Balletbo i Serra <eballetbo@redhat.com> - 0.1~git.20250530.3ccaa1a-1
changelog:
  - Check for g_malloc failure in unpack_efi_zboot_image
  - EFI zboot payload offset and size validation
  - Correct and simplify output file writing logic in main
  - Direct gunzip error messages to stderr
  - Improve ZSTD decompression error handling and reporting
  - Suppress unused parameter warnings in zalloc/zfree
  - Initialize z_stream in gunzip to prevent uninitialized use
  - Prevent memory leak in gunzip on inflateInit2 failure
  - Allow output to stdout to provide greater flexibility
  - Refactor output file writing in unzboot
  - Add SPDX license identifier and simplify license header
  - Add EFI application with zstd compression example
  - Append to the name the type of compression


author: Dominik Mierzejewski <dominik@greysector.net> - 3.2.4-1
changelog:
  - update to 3.2.4 (resolves rhbz#2231660)
  - switch to SPDX expression in License tag
  - use modern autosetup and plain cmake dependency and macros


author: Björn Esser <besser82@fedoraproject.org> - 2.3.0-5
changelog:
  - Add tools package
  - Add explicit perl BRs
  - Add example program to doc package
  - Drop google site-verification file from doc package
  - Require main package in doc package to avoid file conflicts


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.26-6
changelog:
  - Drop support for EL7
  - Add support for EL10
  - Explicitly require pcre2 (all builds already pulled this
    in anyway)


author: Ralf Ertzinger <ralf@skytale.net> - 2.0.27-1
changelog:
  - Update to 2.0.27
  - Drop merged patches
  - Re-enable rack plugin for EPEL10, dependencies now present


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - Update to 2.10 upstream release
  - Update libdir patch
  - No longer glob SONAME when listing shared library files
  - Use SPDX license identifiers
  - Fix license from BSD to MIT AND BSD-3-Clause
  - Fixes: RHBZ#2269036


author: Jonathan Wright <jonathan@almalinux.org> - 1.32.0-1
changelog:
  - update to 1.32.0 rhbz#2304045
    Resolves CVE-2024-39924
    Resolves CVE-2024-39925
    Resolves CVE-2024-39926


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
changelog:
  - update to 1.33.0 rhbz#2342073
    Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
    Fix CVE-2025-24364 RCE in the admin panel
    Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait


author: Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
changelog:
  - update to 1.33.2 rhbz#2343535
    Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558


author: Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
changelog:
  - update to 1.36.0 rhbz#2368636
  - Fix bitwarden mobile app not working rhbz#2437599
  - Fix CVE-2025-58160 vaultwarden: Tracing log pollution
  - Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
  - Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
  - Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
  - Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
  - Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
  - Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion


author: Jonathan Wright <jonathan@almalinux.org> - 2026.4.1-1
changelog:
  - update to 2026.4.1 rhbz#2387335
  - Fixes CVE-2026-27803 Unauthorized collection management operations due to improper access control
  - Fixes CVE-2026-27801 Two-factor authentication bypass allows unauthorized access and data deletion
  - Fixes CVE-2026-27802 Privilege Escalation via Unauthorized Bulk Permission Update
  - Fixes CVE-2026-27898 Information disclosure via API partial update


author: Pavel Raiskup <praiskup@redhat.com> - 5-1
changelog:
  - support for fast "ruff" analyser
  - --linter-tag option added
  - subproject detection by .vcs-diff-lint.yml


author: Pavel Raiskup <praiskup@redhat.com> 6-1
changelog:
  - bugfix: correctly honor file renames
  - bugfix: fix subproject detection for git worktree
  - ruff: do full project scans (since Ruff is fast enough)
  - check the new (changed) code in a side-directory


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - drop unnecessary newline in the output
  - ruff: don't prefix the error locations with absolute path
  - ruff: don't optimize out the full Ruff run
  - print the git sha1 being analyzed
  - bugfix: correct matching filenames with endswith()


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - don't require all the linters, just recommend them
  - use requested linters only if they are available
  - nicer info/debug output


author: Pavel Raiskup <pavel@raiskup.cz> 6.7-1
changelog:
  - Handle (no traceback) "invalid-syntax" code from Ruff
  - log.debug() all git commands
  - do not let "git apply" pollute stderr with whitespace errors


author: Fedora Release Engineering <marcus_fedora@baseband.digital> - 3.2.0-5
changelog:
  - Enable tests
  - Disable rotator2 SSE 4.1 kernels (other implementations available)
  - Use default compiler flags (strict aliasing works)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.3.5-1
changelog:
  - Update to version 3.3.5
  - Do not run tests
    - some scripts needed for generating the test certificates are missing


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.4-1
changelog:
  - Moved from 3.3.x to 3.5.x
  - License has changed from MPLv2 AND Boost to MPLv2
  - No longer need to carry the big-endian patch
  - Needed to fix some entries which did not include cstdint


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-2
changelog:
  - Try to fix the selinux problem seen with CS10
  - Try to fix problem with socket creation and systemd


author: Stephen Smoogen <smooge@fedoraproject.org> - 3.5.11-3
changelog:
  - Rewrite the selinux policy from scratch with sepolgen
  - Remove the socket creation as systemd as vsomeip will not work with it.


author: Robert Scheck <robert@fedoraproject.org> - 0.5.3-63.git20230121
changelog:
  - Added upstream patch to fix out-of-bounds access due to multiple backspaces
    to address incomplete fix for CVE-2022-38223 (#2222775, #2222780, #2255207)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 6.0.4-12
changelog:
  - Explicitly set most Makefile variables
  - Moves the documentation into the standard location
  - Enables rebuilding localized man pages etc.


author: Petr Pisar <ppisar@redhat.com> - 5-22
changelog:
  - Disable filesystem subpackage as it is already provided by CentOS 10 Stream
    (bug #2309358)
  - Convert license tags to SPDX
  - Fix restarting systemd services


author: Romain Geissler <romain.geissler@amadeus.com> - 2.1.0-10
changelog:
  - Disable explicit OCSP requests by default for privacy reasons.
  - Accept --progress=dot:... for backwards compatibility.


author: Michal Ruprich <mruprich@redhat.com> - 2.2.0-1
changelog:
  - New version 2.2.0
  - Resolves: rhbz#2298879 - Using options -nc and -O simultaneously causes existing files to be clobbered/truncated
  - Resolves: rhbz#2327788 - wget starts using non-working IPv6 addresses on dual stack
  - Resolves: rhbz#2327728 - Crash: "free(): double free detected in tcache 2" when using --load-cookies
  - Resolves: rhbz#2280151 - wget2 always re-downdloads when using custom output filename


author: Sudip Shil <sshil@redhat.com> - 1.0.7-1
changelog:
  - feature added: fontname option, sans-serif would be default
  - feature added: add option to print utf8 hex sequence


author: Sudip Shil <sshil@redhat.com> - 1.0.8-1
changelog:
  - Handling non-printable charcaters
  - Print nicer names for all non-printable characters
  - code rendering


author: Sudip Shil <sshil@redhat.com> - 2.1.0-0
changelog:
  - Added --language (-l) CLI option to detect the default font for a given language code, which detects and prints the default font family that supports the specified language.
  - Introduced valid_langs[] array containing known language codes supported by fontconfig, Rejects invalid language codes early with a clear error message.
  - Checks not only if a font is returned, but whether it actually supports the given language.
  - Updated --help output to include usage for --language option.
  - updated readme with installation, build section.


author: Sudip Shil <sshil@redhat.com> - 2.2.0-1
changelog:
  - Modified input_char to handle multiple words as a single input string, allowing space-separated characters.
  - :: as the delimiter for Fontconfig parameters.
  - help section in better format
  - Modified tests.sh to include new test cases for space-separated inputs and :: parameter handling.


author: Sudip Shil <sshil@redhat.com> - 2.3.0-1
changelog:
  - Improve input handling for -f option and Update test cases in to cover new scenarios and edge cases.
  - now tests.sh can capture segmentation fault and save in test_error txt file
  - Created github workflow action tests.yml in github - if test fails then it is usefull for CI and automation.


author: Sudip Shil <sshil@redhat.com> - 3.0.0-1
changelog:
  - resolve snowflake emoji incorrectly defaulting to Symbola
  - emoji detection for BMP ranges and remove redundant logic
  - Integrate Pango API to segment and find fonts and refine hex detection logics
  - Fix Pango sans-serif fallback and --language feature not giving output fixed
  - Fix CI build by adding missing GLib and Pango dependencies


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.7.0-9
changelog:
  - Update architectures for asan/tsan/ubsan tests based on GCC 15
  - Adds riscv64 to supported architectures for all three kinds of tsts


author: Aleksei Bavshin <alebastr@fedoraproject.org> - 0.17.0-1
changelog:
  - Update to 0.17.0 (#2250885)
  - Use xcb-errors util library
  - Apply patches from 0.17.x bugfix branch


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-27
changelog:
  - Clarify URL/Source situation, and do not claim to have a working source
    archive URL
  - General tidying of spec file; use modern macros and install HTML format
    description as documentation
  - Add hand-written man pages


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.20091126-47
changelog:
  - Security fix for CVE-2010-1028
  - Various other fixes collected by Debian and contributed back upstream to
    the sfnt2woff-zopfli fork: https://github.com/bramstein/sfnt2woff-
    zopfli/pull/20


author: Hans de Goede <hans@hansg.org> - 3.2.9a-1.20250317gitce9782a
changelog:
  - Update to 3.2.9a + latest git changes to fix build with -std=c11
  - Switch to upstream appdata/metainfo and desktop file
  - Drop all patches (all upstreamed)
  - Resolves: rhbz#2341567
  - Resolves: rhbz#2385740


author: Xavier Bachelot <xavier@bachelot.org> - 0.99.14-2
changelog:
  - Use SPDX License: tag
  - Drop useless conditionals
  - Drop useless comments
  - Add EL7 cond for %post/%postun
  - Escape unescaped % in %changelog
  - Drop very old Obsoletes:/Provides: for xine/xine-skins


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.5-7
changelog:
  - Add missing autoconf BR and drop bogus libtool BR
  - Add --force to autoreconf
  - Drop --disable-silent-rules configure argument, redundant with V=1 in
    make_build macro
  - Install ChangeLog and README
  - Add cryptographic source archive verification


author: Jonathan Wright <jonathan@almalinux.org> - 1.60.4-1
changelog:
  - update to 1.60.4 rhbz#2334236
  - re-enable builds against libxml2, no more bundled libexpat
  - fixes rhbz#2310136
  - fixes rhbz#2310146
  - fixes rhbz#2310152


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.1.2-1
changelog:
  - xbitmaps 1.1.2
  - Use make macros, see
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 0.6.0-2
changelog:
  - Correct naming of helper library libXrdPelicanHttpCore (not a plugin)
  - Fix parallel running of Posc tests


author: Vitaly Zaitsev <vitaly@easycoding.org> - 0.7.0-3
changelog:
  - Fixed broken CMake configs (rhbz#2188009).
  - Backported CMake fixes from upstream.
  - Converted license tag to SPDX.
  - Performed minor SPEC cleanup.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-9
changelog:
  - Add CVE-2025-6545_6547.prebundle.patch and regenerate bundle. Fixes CVE-2025-6545 and CVE-2025-6547.


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-11
changelog:
  - Refresh bundle
  - Drop patches obsoleted by new bundle
  - Add yarn-update-jest.prebundle.patch to update jest and avoid some vulerable dependencies
  - Apply fixes for CVE-2025-8262 and CVE-2025-8263


author: Sandro Mani <manisandro@gmail.com> - 1.22.22-12
changelog:
  - Regenerate bundle, fixes CVE-2025-59343
  - Patch out eslint and commitizen devDependencies to reduce dependencies


author: Dominik Mierzejewski <dominik@greysector.net> - 1.3.0^20230922git9defefa-1
changelog:
  - update to latest git snapshot
  - drop obsolete patch
  - use modern macros
  - run the test suite in %check
  - fixes: CVE-2023-37732 CVE-2023-31975 CVE-2021-33454


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


author: Michel Lind <salimma@fedoraproject.org> - 0.8.0-1
changelog:
  - Update to 0.8.0 upstream release
  - Resolves: rhbz#2443508
  - Re-enable debuginfo generation
  - Enable Packit
  - Verified the SPDX license conversion


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-7
changelog:
  - build stage 3 using zig build system
  - add user provided options to the end of the build and install options


author: Jan200101 <sentrycraft123@gmail.com> - 0.13.0-8
changelog:
  - specify to build against local zig stdlib directory to ensure we are building against the newest stdlib
  - use release fast instead of release safe to fix aarch64 builds from running out of memory
  - enable position independent executable for the zig build


author: Justin Wheeler <jwheel@fedoraproject.org> - 1.0.3-12
changelog:
  - Fix FTBFS. Thanks @limb for the hotfix.
  - Upstream work ongoing for improved support with newer versions of the C programming language and compilers.


