# changelog

author: Richard W.M. Jones <rjones@redhat.com> - 1:1.51.2-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Íñigo Huguet <ihuguet@riseup.net> - 1:1.52.2-1
changelog:
  - Update to 1.52.2
  - Partially fixes CVE-2025-9615. To protect totally from it, see:
    https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2325.


author: Chad Lemmen <rpm@stansoft.org> - 1.6.1.p4-1
changelog:
  - added BuildRequires: rpcgen libtirpc-devel
  - added configure option --enable-minimal=yes to not build aace or glade
  - updated to 1.6.1.p4


author: Ranjan Maitra <aarem AT fedoraproject DOT org> - 2.3-34
changelog:
  - updated obsolete URL http://arp242.net/code/battray/ to https://github.com/arp242/battray
  - address BZ #2387778


author: Dalibor Pospisil <dapospis@redhat.com> - 1.30-1
changelog:
  - prefer yum over direct download mechanism for the rpm downloads
  - a few code cleanups
  - fixed some typos
  - improved full fmf_id processing
  - changed installation prefix from / to /usr


author: Dalibor Pospisil <dapospis@redhat.com> - 1.31.4-1
changelog:
  - fixed getting base arch on Fedora and c10s
  - rlReport support SKIP result, by chuhu
  - fixed rlIsRHELLike on systems without /etc/os-release, e.g. RHEL-6
  - some minor updates


author: Dalibor Pospisil <dapospis@redhat.com> - 1.32
changelog:
  - introduction of the new way to foist the os-relase and thus present
    different system to the tests, including the version, by KwisatzHaderach


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.2.0-1
changelog:
  - Update to 1.2.0 (close RHBZ#2401888)
  - Stop trying to support EPEL7, which is end-of-life
  - Port to pyproject-rpm-macros (close RHBZ#2377212)
  - Test the Python extension


author: Than Ngo <than@redhat.com> - 142.0.14^chromium142.0.7444.175-1
changelog:
  - Update to 142.0.7444.175
  - * High CVE-2025-13223: Type Confusion in V8
  - * High CVE-2025-13224: Type Confusion in V8


author: Than Ngo <than@redhat.com> - 142.0.14^chromium142.0.7444.175-3
changelog:
  - Enable system libcxx
  - Fix link error when building with system libcxx
  - Apply memory-allocator-dcheck-assert-fix for aarch64


author: Than Ngo <than@redhat.com> - 143.0.9^chromium143.0.7499.40-1
changelog:
  - Update to 143.0.7499.40
  - Hoshino Lina: Update to cef-143.0.9+ge88e818 (rhbz#2420939)
  - * High CVE-2025-13630: Type Confusion in V8
  - * High CVE-2025-13631: Inappropriate implementation in Google Updater
  - * High CVE-2025-13632: Inappropriate implementation in DevTools
  - * High CVE-2025-13633: Use after free in Digital Credentials
  - * Medium CVE-2025-13634: Inappropriate implementation in Downloads
  - * Medium CVE-2025-13720: Bad cast in Loader
  - * Medium CVE-2025-13721: Race in v8
  - * Low CVE-2025-13635: Inappropriate implementation in Downloads
  - * Low CVE-2025-13636: Inappropriate implementation in Split View
  - * Low CVE-2025-13637: Inappropriate implementation in Downloads
  - * Low CVE-2025-13638: Use after free in Media Stream
  - * Low CVE-2025-13639: Inappropriate implementation in WebRTC
  - * Low CVE-2025-13640: Inappropriate implementation in Passwords
  - Drop workaround darkmode-image-policy.patch
  - Fix build error due to Unresolved dependencies
  - Fix swiftshader to compile with llvm-16.0
  - Refresh python-3.9-ftbfs patch for el9
  - Refresh ppc64le patches
  - Refresh chromium.conf


author: Than Ngo <than@redhat.com> - 143.0.10^chromium143.0.7499.109-1
changelog:
  - Update to 143.0.7499.109
  - * High: Under coordination
  - * Medium CVE-2025-14372: Use after free in Password Manager
  - * Medium CVE-2025-14373: Inappropriate implementation in Toolbar
  - Workaround problem of auto dark mode inverting images and making them
    unreadable
  - Hoshino Lina: Update to cef-143.0.10+g8aed01b (rhbz#2421703)


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-1
changelog:
  - Update to release v1.8.0
  - Resolves: rhbz#2392433
  - Upstream fixes and new features
  - Correct packit configuration


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.8.0-2
changelog:
  - Resolve CVE-2025-47910
  - Resolves: rhbz#2398656, rhbz#2398402
  - Rebuild with go 1.25.1 (fc44, fc43) or 1.24.7 (fc42, fc41)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.9.0-1
changelog:
  - Update to release v1.9.0
  - Resolves: rhbz#2420515
  - Resolves CVE-2025-58188: rhbz#2411454, rhbz#2411189, rhbz#2410923
  - Resolves CVE-2025-58185: rhbz#2410556, rhbz#2410277, rhbz#2409991
  - Resolves CVE-2025-61723: rhbz#2409605, rhbz#2409325, rhbz#2409043
  - Resolves CVE-2025-58189: rhbz#2408135, rhbz#2407858, rhbz#2407588
  - Fixes CVE-2025-67499, a bug in the nftables backend for the portmap
    plugin
  - Additional changes


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - unify bindir and sbindir
  - lock the pulp-redirect.txt file
  - add HTTP redirect for new Pulp projects
  - fix FTBFS in openEuler 24.03 LTS
  - create HTTP redirects for migrated projects
  - fix pylint - Too many local variables
  - migrate os.listdir() to os.scandir() to increase performance
  - add resalloc ticket info to backend.log
  - drop unused attributes in RemoteHost class
  - per-arch/per-owner limit fixed
  - fix createrepo action for Pulp CoprDirs
  - add test-case for CoprDir's BuildJob.chroot_dir
  - add script to migrate existing build results to Pulp
  - typo in the per arch+owner limit option documentation
  - resultdir-cleaner: remove old appstream failures
  - copr-backend-resultdir-cleaner logs into config["log_dir"]
  - copr-backend-resultdir-cleaner to skip module dirs
  - manpage for copr-backend-resultdir-cleaner && logger fix
  - allow using crt+key pair for Pulp authentication


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - backend: add script to migrate pulp.json to Pulp labels
  - backend: add function to get pulp object based on its href
  - backend: pass build ID to upload_build_results
  - backend: more log "checkpoints" for build worker


author: Jakub Kadlcik <frostyx@email.cz> 2.6-1
changelog:
  - Set pulp_labels at RPM upload time.
  - Wait on add_and_remove task to finish
  - Switches PulpStorage to using the synchronous RPM upload API
  - Specify charset in lighttpd mimetypes
  - Fix waiting for Pulp copr_base repository
  - Create one repository version and publication per chroot
  - Optimize copr_log_hitcounter for memory


author: Jakub Kadlcik <frostyx@email.cz> 2.7-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Improve robustness and cooperation with rpmbuild
  - Don't run createrepo_c for migrated projects
  - Implement Pulp forking
  - Fix Pulp builds for CoprDirs
  - Adds batching to add_content() and delete_content() in Pulp client.
  - Explicitly set home directory and shell for the user
  - Make sure every PULP api call is logged
  - Set retain_package_versions and retain_repo_versions on repositories
  - Fix race condition in BatchedCreaterepo
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove el7 condition
  - Drop the 'Z' suffix from timestamp
  - Switch RPM upload to the synchronous API from pulp_rpm
  - Fix false-positive failures for build deletion
  - Fix ftbfs for deepcopy not able to handle itertools.count


author: Jakub Kadlcik <frostyx@email.cz> 2.8-1
changelog:
  - Don't traceback when trying to run branch action for second time
  - Implement branch-fedora support for Pulp projects
  - Add a helper script to query Pulp results
  - Handle unsuccessful Pulp requests
  - Don't upload results to Pulp in parallel


author: Jakub Kadlcik <frostyx@email.cz> 2.9-1
changelog:
  - Log the error message that we got from Pulp
  - Fix duplicate NEVRA error when migrating projects to Pulp
  - Fix sub-project handling in the copr-change-storage script


author: Jakub Kadlcik <frostyx@email.cz> 2.10-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Log conflicting NEVRAs when uploading
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.11-1
changelog:
  - timeout= for requests was missing, use SafeRequest
  - copr_prune_results: bigger file limit
  - Move pulp-redirect.txt to persistent storage
  - Wait until both copr_base and copr_coprdir exist
  - Set user agent for Pulp requests to crc-pulp-client
  - Set longer timeout for Pulp file uploads
  - Fix deleting project from pulp
  - Drop requirement on pytz
  - Add Pagination for PulpClient.get_content
  - Implement chunked uploads to Pulp
  - Add option to migrate all projects for an owner


author: Pavel Raiskup <praiskup@redhat.com> 1.111-1
changelog:
  - correctly check CoprDir name before uploading large SRPM
  - assign fallback value from self.username
  - fix `copr build` +args --help output
  - typo in --namespace help output


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.4-1
changelog:
  - Fix copr-cli download for Pulp projects
  - Add API endpoint for generating a new token
  - Add wildcard support for 'Packit allowed forge projects'


author: Jakub Kadlcik <frostyx@email.cz> 1.205-1
changelog:
  - Update download stats footnote
  - Migrate more enpoints to flask-restx
  - Speedup the removal of temporary projects
  - Add link to the Outdated chroots removal policy
  - Compatibility with SQLAlchemy 2.0


author: Jakub Kadlcik <frostyx@email.cz> 1.206-1
changelog:
  - Center the outage warning banner text
  - Fix unexpected output schema for deleting builds
  - Fix parsing build IDs to be deleted
  - add per package timeout option
  - Alembic: fix a migration syntax warning
  - EOL-emails deterministic
  - List temporary project after normal projects
  - Don't index unlisted and temporary projects
  - Speedup the update-indexes command
  - Make EOL chroot emails shorter
  - Add tests for branching custom directory
  - Run rawhide-to-release for all CoprDirs
  - Delete compatibility code between flask and flask-restx
  - Migrate builds to flask-restx
  - Fix bug in reporting failed SRPMs to log-detective
  - Commit after every 10 deleted projects instead of 100
  - Don't pass raw SQL as string but rather SQLAlchemy text


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.0-1
changelog:
  - Show Webhook History table under Settings -> Integrations
  - Fix the 500 for racy creation attempts
  - Implement project, build, chroot deletion and creation in Pulp
  - Provide statistics on how many users submitted at least one build in past month
  - Use the same repofile for all CentOS Stream versions


author: Pavel Raiskup <praiskup@redhat.com> 2.2-1
changelog:
  - fix FTBFS when using python below 3.12
  - Add sysusers.d config file to allow rpm to create users/groups automatically
  - fix code formatting test causing FTBFS on F43+
  - Revert "convert eror message to binary text before emitting"
  - fix a few pylint and sqlalchemy warnings
  - we use the standard results URL also for Pulp projects
  - feat: provide log-detective explain integration for failed builds
  - bugfix: use after/with-build-id fields when "rebuilding all"
  - make coprdirs have their repo available in the buildroot
  - isolate PR builds from different packages within one project
  - remove redundant byte compile lines, these dirs are empty already
  - change order of login menu, sign up should be the latest
  - create HTTP redirects for projects migrated to PULP
  - stop using deprecated Query.get method
  - unify error message for rebuild and rebuild all
  - add sponsors of copr project to page footer
  - add API documentation to the copr project useful links
  - migrate os.listdir() to os.scandir() to increase performance
  - assume user has been notified by clicking "Expire now" button
  - fix /build/source-chroot/ endpoint
  - document how to report security issues
  - change default logging level to INFO for check_for_anitya_version_updates
  - add script to migrate existing build results to Pulp
  - pagure events: use text() wrapper around raw queries
  - regenerate devel repository when multiple builds are deleted
  - support build-time dependencies from other storages
  - move repo functions to a separate file
  - builds_initiated_via_hook always passed as a list & doc string update
  - custom webhook handler now adds webhook history record
  - doc: link dnf.conf(5)


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Specify reason for running createrepo
  - Implement support for Pulp manual createrepo
  - Show coprdirs in the builds table
  - Implement Pulp forking
  - Redirect to the current URL after OIDC login
  - Drop support for OID auth
  - Add symlink to alma family logo from almalinux
  - Fix AI button visibility
  - After edit, redirect to the package
  - Disable network when crearing a new fedora review project
  - Hide excessive CoprDirs under a details tag
  - Fix local builds in Pulp projects
  - Add AlmaLinux logo
  - Update centos logo
  - Fix one pagure-events' traceback
  - Use the new BeautifulSoup find_all() method
  - Drop the duplicit session.commit() call
  - Fix SAWarnings about autoflush
  - pagure-events fail for "dots" in copr.name
  - Treat malformed task_id in backend_general
  - Log the user who removes a project


author: Jakub Kadlcik <frostyx@email.cz> 2.4-1
changelog:
  - Use beginning of the build as reference for timestamp
  - Support both POST and DELETE for deleting a build
  - Print architecture statistics on status page
  - Implement branch-fedora support for Pulp projects
  - Update e-mail on login
  - Drop libravatar url from data dump (GDPR)
  - Delete data signs-out and redirects to homepage (GDPR)
  - Delete also e-mail entry (GDPR)


author: Jakub Kadlcik <frostyx@email.cz> 2.5-1
changelog:
  - Don't run builds or actions in projects that are migrated to Pulp
  - Drop support for building modules


author: Jiri Kyjovsky <j1.kyjovsky@gmail.com> 2.6-1
changelog:
  - Migrate from pytz to zoneinfo
  - Add API endpoint for generating a new token
  - Fix swapped canceled and ended builds
  - Add option to migrate all projects for an owner
  - Add wildcard support for 'Packit allowed forge projects'


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.16-1
changelog:
  - 2.4.16 (fedora#2417970)
  - rebuild due binutils bug (fedora#2418285)
  - fix division by zero crash in pstops (fedora#2415396)


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.2.1-1
changelog:
  - Release 2.2.1
    * This patch release fixes the BPF to correct capture ICMPv6, a typo in
      the filter had it matching "ip" and not "ip6".
    * Other changes are updates to GitHub workflows and man-pages.
    * Commits:
      ea82cd1 Copyright
      aa14a9f ICMP BPF filter
      6ef17e2 Badges
      6722677 Workflow
      1cb22f0 Man-page opt, Dumper


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.0-1
changelog:
  - Release 2.3.0
    * This release adds support for Linux cooked v2 link-type, a new output
      format, a new plugin and fixes a couple of issues.
    * The new output format `tcpdns` can be used to generate a file with the
      DNS as a TCP stream, first 16bit size (network order) then the DNS
      message, which is compatible with `dnsperf -B`.
    * The new plugin `asudp` can be used to rewrite outgoing packet by taking
      the DNS that's found and construct UDP packets from it.
    * Other changes:
      - Fix #314:
        - man-page: Clarify that `pktsize` is shown before parsing the IP packet
        - `-g`: Quote `,` characters
      - Fix #316: Fix handling of L2/ethernet frames that are larger than the IPv4/v6 packet
      - Fix multiple print statements w.r.t. `size_t`/`struct timeval`, `%zu`/`%ld` and type casting
      - Handle extension function pointers better
      - Clarify that `-C` counts uncompressed output
      - Block PCAP output if TCP reassemble is used
      - Increase maximum DNS messages in a reassembled TCP message
      - Add new extension interface for setting output packet
      - Update pcap-thread to v4.1.0
    * Commits:
      e689bc8 pcap-thread v4.1.0
      29d184b DLT_LINUX_SLL2
      ba793a9 Fixes, asudp plugin, tcpdns output format
      6c133d4 Ethernet padding
      420548a Diag output
      8b92a52 SPEC
      a3fb1dd Mailing-list


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.3.1-1
changelog:
  - Release 2.3.1
    * This patch release fixes issues on 32bit systems when they are using
      64bit time structures (`_TIME_BITS` set to 64) and updates pcap-thread
      to require libpcap with `DLT_LINUX_SLL2` support.
    * Commits:
      a5e9a4a pcap-thread v4.1.1
      731d9e0 Add support for 64bit time structures on 32bit systems


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.0-1
changelog:
  - Release 2.4.0
    * This release brings support for reading compressed PCAPs, a few new
      plugin extensions and updates to autotools.
    * Changes:
      - Add `CHANGES` to docs
      - Update autotools requirement to 2.69 and fix deprecation warnings
      - Support reading gz/xz/lz4/zst compressed PCAPs based on file extension
      - New plugin extensions:
        - `DNSCAP_EXT_GET_PCAP_THREAD_FTELL`: function for getting the current uncompressed position in the PCAP file being read upon being called
        - `DNSCAP_EXT_GET_PKTHDR_CAPLEN`: function that returns the actual packet length as reported by libpcap
    * Commits:
      f7e4cad SLE/openSUSE lz4
      b30d82f Autotools, compressed PCAPs, plugin extensions
      ac7f37b CHANGES


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.4.1-1
changelog:
  - Release 2.4.1
    * This patch release fixes a bug introduced in v2.4.0 where writing gziped
      PCAPs broke, and readds sending timestamp to plugins close function which
      was incorrectly removed in v2.2.1.
    * Changes:
      - Remove obsolete code with zlib being required
      - Add gz write test
      - Fix #334:
        - Readd timestamp when calling plugin close
        - Update plugin close interface to pass timestamp that was missed in 2f65abd0ea059046a3ab54260806891d557d1180
    * Commits:
      9abd07d plugin close
      b10f923 gz write


author: Jerry Lundström <lundstrom.jerry@gmail.com> 2.5.0-1
changelog:
  - Release 2.5.0
    * This release adds two new plugin extensions, rewrites the compressed PCAP
      reader, removes a PCAP header check to not drop valid packets and fixes
      problems with `-e` filtering.
    * New plugin extensions:
      - `DNSCAP_EXT_BREAKLOOP_PCAPS`: for stopping the PCAP process/capture loop
      - `DNSCAP_EXT_GET_LAST_TOTAL_COMPRESS_READ`: to get the uncompressed bytes counter from the compression backend in use
    * Compressed PCAP reader:
      - Complete rewrite of the reader to fix several bugs, like buffer overrun and infinite loops
      - Add support to read bzip2 PCAPs
      - New option `-o override_compress_extension=<ext>` to force a specific compression when reading
    * Fixes:
      - Remove PCAP `hdr.len != hdr.caplen` check to not drop valid packets
      - `-e`: Fix #356
        - Provide usage warning instead of assert'ing on empty option
        - Remove confusing part of documentation (may still be a bit confusing...)
        - Fix filtering where TC=1 and no rcode
    * Other changes:
      - Allow C++ to include `dnscap_common.h` without needing to specify `extern "C"`
      - Update email address, remove old obsolete list address
      - Various fixes for CI and code coverage
    * Commits:
      6fb07d6 -e filter
      66a26b9 fix scan-build
      43f1137 CI updates
      8e22e9f CI
      90402ac bsd builds
      ba531eb slim deps
      d401d81 builds
      219d05d ci
      6795ad3 Migrate to Codeberg
      09747ce RPM
      81f142c Compress read
      e583788 Fix dropped packets
      a042145 proper fix gcov
      b1741d4 fix gcov
      6914dc9 breakloop
      07917b4 C++
      0ebdffc C++
      5b768e5 Email


author: Fedor Vorobev <fvorobev@redhat.com> - 2.5.0-2
changelog:
  - Modified upstream RPM .spec file.
  - Made it follow Fedora Package Guidelines.
  - Patched cryptopan to have expected output on big endian systems.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-1
changelog:
  - Update to release v2.40.2
  - Resolves: rhbz#2405876
  - Upstream fixes
  - Adopt gocheck2 macro for %check


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.40.2-2
changelog:
  - Resolve CVE-2025-62725
  - v2.40.2 resolves CVE-2025-62725.
  - Associated release-specific rhbz will be manually closed: F41 - #2406691
    and F42 - #2406693


author: Bradley G Smith <bradley.g.smith@gmail.com> - 5.0.0-1
changelog:
  - Update to release v5.0.0
  - Resolves: rhbz#2414590
  - Upstream notes: 'To avoid confusion with the "v2" and "v3" legacy compose
    file formats, we decided to directly jump to version 5.x'
  - New features and fixes.
  - Major change: 'Internal builder has been removed, build is delegated to
    Docker Bake (same as docker build command)'


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.3.0-1
changelog:
  - Update to 3.3.0 (close RHBZ#1684966)
  - Drop obsolete ldconfig_scriptlets macro
  - Drop and Obsolete the static library (-static subpackage)
  - Properly mark the LICENSE file
  - Update License to SPDX


author: Graham White <graham_alton@hotmail.com> - 4.1.3-7
changelog:
  - re-add fish completions with patch (#935)
  - remove Sun AU format support as it's deprecated in Python 3.13 (#936)


author: Simone Caronni <negativo17@gmail.com> - 1.3.0-2
changelog:
  - Gate defrag behing a build conditional.
  - https://bugzilla.redhat.com/show_bug.cgi?id=2413545
  - https://github.com/exfatprogs/exfatprogs/issues/318


author: Ondřej Nosek <onosek@redhat.com> - 1.45-10
changelog:
  - Dynamically exclude Rawhide branch from fedpkg branching
  - Do not auto-request EPEL x.y modules
  - Don't allow to request repositories in modules/ namespace


author: Ondřej Nosek <onosek@redhat.com> - 1.46-1
changelog:
  - `request-repo`: add `--onboard-packit` argument (nforro)
  - Fork a package using anonymous auth - #574 (onosek)
  - Check that auth tokens aren’t written to world-readable files (git)
  - Don't allow to request repositories in modules/ namespace (miro)
  - Do not auto-request EPEL x.y modules (carlwgeorge)
  - Dynamically exclude Rawhide branch from fedpkg branching - #566 (samyak.jn11)
  - Fix unittests when building for ELN target - #589 (onosek)
  - Python 3.13 environment and renew testing image (onosek)
  - `releases-info` should always show the same order - #569 (onosek)
  - Update expired token exception instructions (astra)
  - Clone epel10 branches with clone -B (carlwgeorge)
  - Update expired token exception instructions (ferdnyc)
  - Add setuptools to dependencies for Python 3.12+ (ferdnyc)
  - Fix tests on EPEL 9/10. (romain.geissler)
  - Fixing unittests for py36 (onosek)
  - gitignore the name-version-build/ directory created by fedpkg prep/local (miro)
  - Handle rhel runtimes when minor version exists in disttag (dherrera)
  - Add tests cases for runtime_disttag removal when working with epel10 (dherrera)
  - Improvements on string parsing (dherrera)
  - Get macros from epel-candidate build target. (dherrera)
  - Fix EPEL10 branch expression to cover 2 or more digits. (dherrera)
  - Use minor value from koji when no minor in branch name (dherrera)
  - Fix minor requirements for EPEL10+ in test (dherrera)
  - Do not auto-request ELN modules (yselkowi)
  - Fixes missing key in distro.os_release_info() (onosek)
  - Update check_bodhi_version to check for >= 6.0.0 (awilliam)
  - Modernize and clean unittest imports (awilliam)
  - Replace and update use of deprecated 'linux_distribution' (awilliam)
  - Drop all usage of six (awilliam)
  - Drop support for bodhi-client <= 5 (awilliam)
  - Add py313 environment as that's current (awilliam)
  - Fix URL of Bodhi in staging (nils)
  - Extend load_rpmdefines to work with EPEL10+ (dherrera)
  - Add EPEL10+ url pattern on assert_valid_epel_package (dherrera)
  - Test url usage in assert_valid_epel_package (dherrera)
  - Add EPEL10 branch name cases as valid (dherrera)
  - Test for valid EPEL branch names (dherrera)
  - Don't print the branch name after dash when there is no dash - 554 (miro)
  - Don't use hatchling on python 3.6 (dherrera)
  - Remove mbs.fedoraproject.org scopes from git cred helper (kj)
  - Fix unittests after creating the project in hatch (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.47-1
changelog:
  - Use ruff code checker instead of bandit (onosek)
  - Clone the API key info into all help messages (mpospisi)
  - README: Documentation link change, and new Jenkins link – `#606`_ (gleiro)
  - `update`: Add unspecified update type (priv.luk@gmail.com)
  - `request-unretirement`: Added a new command (amedvede)
  - `request-repo`: creating project and package in Anitya (amedvede)
  - Switch to %pyproject_* macros (onosek)
  - `retire`: extend the command's console help - `rhbz#2189969`_ (onosek)
  - Jenkinsfile: use local declaration instead of global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji – `#600`_ (onosek)


author: Sandipan Roy <sandipan@redhat.com> - 2.1.0-1
changelog:
  - Update to version 2.1.0
  - Update to 2.1.0 - Closes rhbz#2061180 rhbz#2352162
  - Implement vendoring approach using go2rpm with vendor archive
  - Add all Go dependencies bundled for offline builds in mock/koji
  - Use rpmautospec for automatic release and changelog management
  - Re-enable tests with selective skipping for TestToCSV failure only
  - Update license to include all vendored dependency licenses: Apache-2.0
    AND BSD-2-Clause AND BSD-3-Clause AND MIT
  - Preserve complete historical changelog from package inception


author: Neal Gompa <ngompa@fedoraproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
  - Backport fixes from upstream to use BeaconDB
  - Use BeaconDB for the default location services source


author: Florian Weimer <fweimer@redhat.com> - 2.41-3
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 046b33800c3e8c7ac21b48e3ce5dbed8901f7e37:
  - x86: Detect Intel Diamond Rapids
  - x86: Handle unknown Intel processor with default tuning
  - x86: Add ARL/PTL/CWF model detection support
  - x86: Optimize xstate size calculation
  - elf: Fix arm-linux-gnueabihf build break from b861755a84
  - elf: Extend glibc.rtld.execstack tunable to force executable stack (BZ 32653)
  - x86: Link tst-gnu2-tls2-x86-noxsave{,c,xsavec} with libpthread
  - x86: Use separate variable for TLSDESC XSAVE/XSAVEC state size (bug 32810)
  - x86: Skip XSAVE state size reset if ISA level requires XSAVE
  - x86_64: Add atanh with FMA
  - x86_64: Add sinh with FMA
  - x86_64: Add tanh with FMA
  - nptl: Check if thread is already terminated in sigcancel_handler (BZ 32782)


author: Florian Weimer <fweimer@redhat.com> - 2.41-7
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 6e489c17f827317bcf8544efefa65f13b5a079dc:
  - ppc64le: Revert "powerpc: Optimized strcmp for power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc : Add optimized memchr for POWER10" (Bug 33059)
  - ppc64le: Revert "powerpc: Fix performance issues of strcmp power10" (CVE-2025-5702)
  - ppc64le: Revert "powerpc: Optimized strncmp for power10" (CVE-2025-5745)
  - elf: Keep using minimal malloc after early DTV resize (bug 32412)
  - nptl: Fix pthread_getattr_np when modules with execstack are allowed (BZ 32897)


author: Florian Weimer <fweimer@redhat.com> - 2.41-9
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit e7c419a2957590fb657900fc92a89708f41abd9d:
  - iconv: iconv -o should not create executable files (bug 33164)
  - CVE-2025-8058: Fix double-free after allocation failure in regcomp (#2383154)


author: Florian Weimer <fweimer@redhat.com> - 2.41-10
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit 513629b14d43bffd83985ffb9cf10e5599e649d2:
  - elf: Handle ld.so with LOAD segment gaps in _dl_find_object (bug 31943)
  - elf: Extract rtld_setup_phdr function from dl_main
  - elf: Do not add a copy of _dl_find_object to libc.so
  - stdlib: resolve a double lock init issue after fork [BZ #32994]


author: Florian Weimer <fweimer@redhat.com> - 2.41-11
changelog:
  - Auto-sync with upstream branch release/2.41/master,
    commit a52c9b75c70124fe4f69e6b0ed288e2c14bd7ce9:
  - Optimize __libc_tsd_* thread variable access
  - i386: Add GLIBC_ABI_GNU_TLS version [BZ #33221]
  - i386: Also add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - i386: Update ___tls_get_addr to preserve vector registers
  - elf: Preserve _rtld_global layout for the release branch
  - elf: Test dlopen (NULL, RTLD_LAZY) from an ELF constructor
  - elf: Fix handling of symbol versions which hash to zero (bug 29190)
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT [BZ #33212]
  - x86-64: Add GLIBC_ABI_GNU2_TLS version [BZ #33129]
  - elf: Compile _dl_debug_state separately (bug 33224)
  - elf: Restore support for _r_debug interpositions and copy relocations
  - elf: Introduce _dl_debug_change_state
  - elf: Introduce separate _r_debug_array variable
  - Use TLS initial-exec model for __libc_tsd_CTYPE_* thread variables [BZ #33234]
  - ctype: Fallback initialization of TLS using relocations (bug 19341, bug 32483)
  - Use proper extern declaration for _nl_C_LC_CTYPE_{class,toupper,tolower}
  - Remove <libc-tsd.h>
  - AArch64: Improve codegen SVE log1p helper
  - AArch64: Optimise SVE FP64 Hyperbolics
  - AArch64: Optimize SVE exp functions
  - AArch64: Improve codegen in SVE log1p
  - AArch64: Optimize inverse trig functions
  - AArch64: Optimize algorithm in users of SVE expf helper
  - AArch64: Avoid memset ifunc in cpu-features.c [BZ #33112]
  - nptl: Fix SYSCALL_CANCEL for return values larger than INT_MAX (BZ 33245)


author: Frédéric Bérat <fberat@redhat.com> - 2.41-12
changelog:
  - Auto-sync with upstream branch master,
    commit 6a0b8e366520a09722aef6c17ec1b103e82f3c28:
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091) (Sachin Monga)
  - ppc64le: Restore optimized strncmp for power10 (Sachin Monga)
  - ppc64le: Restore optimized strcmp for power10 (Sachin Monga)
  - AArch64: Fix and improve SVE pow(f) special cases (Pierre Blanchard)
  - AArch64: fix SVE tanpi(f) [BZ #33642] (Pierre Blanchard)
  - AArch64: Fix instability in AdvSIMD sinh (Joe Ramsay)
  - AArch64: Fix instability in AdvSIMD tan (Joe Ramsay)
  - AArch64: Optimise SVE scalar callbacks (Joe Ramsay)
  - aarch64: fix includes in SME tests (Yury Khrustalev)
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601) (Florian Weimer)
  - aarch64: fix cfi directives around __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: tests for SME (Yury Khrustalev)
  - aarch64: clear ZA state of SME before clone and clone3 syscalls (Yury Khrustalev)
  - aarch64: define macro for calling __libc_arm_za_disable (Yury Khrustalev)
  - aarch64: update tests for SME (Yury Khrustalev)
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp (Yury Khrustalev)
  - x86: fix wmemset ifunc stray '!' (bug 33542) (Jiamei Xie)
  - x86: Detect Intel Nova Lake Processor (Sunil K Pandey)
  - x86: Detect Intel Wildcat Lake Processor (Sunil K Pandey)
  - nss: Group merge does not react to ERANGE during merge (bug 33361) (Florian Weimer)
  - AArch64: Fix SVE powf routine [BZ #33299] (Pierre Blanchard)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.4-1
changelog:
  - New GCT release v6.2.20251212
  - Drop patches included in the release
  - Drop old system V init scripts


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.2.0-2
changelog:
  - Fix s390x tests and RISCV build
  - Introduces a patch that fix tests on BigEndian
  - Introduces a patch that disable RVV runtime dispatch for RISCV builds


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.65-2
changelog:
  - mod_ssl: Add SSLVHostSNIPolicy directive to set the compatibility level
    required for VirtualHost matching.


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-1
changelog:
  - Use gdk_init() instead of gtk_init() in ibus-x11
  - Revert "Do not load en-US compose table by default"
  - Call IBus.init() importing Python IBus module
  - Some bug fixes


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-2
changelog:
  - Send FocusIn signal again after delayed FocusId property
  - Revert "Add a pad to the cursor height in Wayland"


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc1-4
changelog:
  - Fix time lag of CandidatePanel in X11
  - Fix infinite Return key in xterm with Wayalnd input-method protocol V2


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32~rc2-1
changelog:
  - Resolves #2341930 Clear object pointers with task free in engineproxy
  - Update Unicode table with keysym


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.32-3
changelog:
  - Resolves: #2237664 Fix mouse position in Emojier category list
  - Resolves: #2326455 Free IBusInputContext in input_method_activate()
  - Resolves: #2346033 Fix SEGV with allocation fail in _Xi18nChangeIC()
  - Resolves: #2392358 Refer QT_IM_MODULES to check Wayland


author: Mike FABIAN <mfabian@redhat.com> - 2.28.0-1
changelog:
  - Update to 2.28.0
  - Add setup UI for the chat with ollama or ramalama
  - Add a ibus-setup-tb.desktop file (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/807)
  - Suggest suffixed word forms as well (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/799)
  - Update emoji annotations from CLDR
  - itb_ollama.py: better error handling when getting model list
  - itb_ollama.py: Add support for ramalama
  - Support OLLAMA_HOST environment variable
  - Translation update from Weblate (de 100%, fr 95.4%, ja 100%, ka 100%,
    kab 74.8%, ko 100%, ru 100%, sv 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Ignore “Enable suggestions by key” and “Minimum number of chars for
    completion“ options when OSK is used Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/813 Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/814
  - Translation update from Weblate (es 100%, tr 100%, zh_CN 73.1%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.3-1
changelog:
  - Update 2.28.3
  - Fix [Install missing dictionaries] feature in the setup tool (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/821)
  - Prefer hunspell over aspell


author: Mike FABIAN <mfabian@redhat.com> - 2.28.4-1
changelog:
  - Update to 2.28.4
  - Make it possible to download missing dictionaries and update existing
    ones from upstream (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/822)
  - Show in a tooltip from which path a hunspell dictionary and a cldr
    annotation have been loaded
  - Translation update from Weblate (de 100%, es 100%, fi 100%, ja 100%,
    ka 100%, ko 100%, sv 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.5-1
changelog:
  - Update to 2.28.5
  - Set short process names on Linux (prctl PR_SET_NAME) or BSD
    (setproctitle) (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/833)
  - Show the direct input mode menu always
  - Workaround for LibreOffice autocorrection (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Show in a tooltip from which path an m17n input method has been loaded
  - Translation update from Weblate (fr 95%, it 100%, pl 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.28.6-1
changelog:
  - Update to 2.28.6
  - Improve workaround for LibreOffice autocorrection (Related:
    https://github.com/mike-fabian/ibus-typing-booster/issues/834)
  - Refactor: Add a ClientInfo class to store the client id (improve
    readability and speed)
  - Code cleanup in setup/main.py
  - Translation update from Weblate (de 100%, es 100%, ja 100%, pl 100%,
    ru 100%, tr 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.29.0-1
changelog:
  - Update to 2.29.0
  - Fix minus sign on buttons in adding autosettings and keybindings
  - Fixes for the Gtk3/Gtk4 port needed for RHEL9 and Ubuntu ≤ 22.04: Fall
    back to Gtk3 on these old systems
  - setup/dictionary_download.py: Fix dictionary download for Ubuntu 24.04.3
    LTS
  - Port setup tool, emoji_picker and everything else except test_0_gtk.py to
    Gtk4. Gtk4 is used by default if available on the system, if not Gtk3 is
    used as a fallback. (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/848)
  - Translation update from Weblate (cz 100%, hu 40.4%, it 99.5%, ka
    100%, ko 100%, sv 100%)


author: Packit <hello@packit.dev> - 34-1
changelog:
  Changes with 34
  ----------------
    - Install openssl in cli container (#292)
      - Author: Justin Sherrill, Reviewers: Brian C. Lane, Michael Vogt
    - build(deps): bump actions/setup-python from 5 to 6 (#296)
      - Author: dependabot[bot], Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update to images 0.191.0 (#302)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - github: add CODEOWNERS (#291)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update osbuild/images to 0.190.0 (dnfjson -> depsolvednf rename) (HMS-9366) (#301)
      - Author: Tomáš Hozza, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: update to images v0.186.0 (#294)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Tomáš Hozza
    - image-builder: use `manifesttest` from `images` (#293)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai
    - main: add support disk based bootc images via --bootc-ref  (HMS-8845) (#245)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Ondřej Budai, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-16


author: Packit <hello@packit.dev> - 35-1
changelog:
  Changes with 35
  ----------------
    - cmd/upload: add fedora ami to aws upload (HMS-9388) (#307)
      - Author: Gianluca Zuccarelli, Reviewers: Lukáš Zapletal, Michael Vogt
    - deps: update to images 0.193.0 (#308)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: update to latest images API changes in imgfilter (#295)
      - Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza

  — Somewhere on the Internet, 2025-09-19


author: Packit <hello@packit.dev> - 36-1
changelog:
  Changes with 36
  ----------------
    - deps: update to images 0.195.0 (#318)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Tomáš Hozza
    - deps: upgrade images to v0.194 (#314)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - gitignore: add common image formats (#312)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: split progress.go into command.go (#313)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-09-24


author: Packit <hello@packit.dev> - 37-1
changelog:
  Changes with 37
  ----------------
    - Support uploading to libvirt (#300)
      - Author: Jakub Kadlčík, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - blueprintload: improve error message in Load (#333)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger, Tomáš Hozza
    - doc: mention CentOS (#336)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Tomáš Hozza
    - go.mod: update to v0.197.0 (#326)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - main: add `--bootc-build-ref` option to set build container (#325)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: add missing test container cleanups (#330)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - test: check that we get the expected image types (HMS-9426) (#320)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-01


author: Packit <hello@packit.dev> - 38-1
changelog:
  Changes with 38
  ----------------
    - deps: bump images to 0.202.0 (#339)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt

  — Somewhere on the Internet, 2025-10-06


author: Packit <hello@packit.dev> - 39-1
changelog:
  Changes with 39
  ----------------
    - ci: consistent triggers for spec check (#346)
      - Author: Simon de Vlieger, Reviewers: Ondřej Budai, Tomáš Hozza
    - ci: split apart test cases (#331)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - cmd/image-builder: adjust code to unified rpmmd.Package struct (HMS-9457) (#334)
      - Author: Tomáš Hozza, Reviewers: Brian C. Lane, Simon de Vlieger
    - deps: update images and blueprint (#345)
      - Author: Simon de Vlieger, Reviewers: Florian Schüller, Tomáš Hozza
    - main: add osbuild version to version command (#332)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Tomáš Hozza

  — Somewhere on the Internet, 2025-10-15


author: Packit <hello@packit.dev> - 40-1
changelog:
  Changes with 40
  ----------------
    - Allow setting custom tags when uploading to AWS (#327)
      - Author: Jakub Kadlčík, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - Support uploading to IBM Cloud (#338)
      - Author: Jakub Kadlčík, Reviewers: Michael Vogt, Simon de Vlieger
    - Support uploading to OpenStack (#337)
      - Author: Jakub Kadlčík, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - deps: switch yaml libraries (#354)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - main: add support for bootc-installer image types (#341)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    - progress: detect real terminal width for messages (#316)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger

  — Somewhere on the Internet, 2025-10-29


author: Packit <hello@packit.dev> - 41-1
changelog:
  Changes with 41
  ----------------
    - Drop the need for --privileged for all subcommands except `build` (#361)
      - Author: Ondřej Budai, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: add gobump action (#365)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger, Tomáš Hozza
    - main: add `--rpmmd-cache` options [HMS-9646] (#358)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: fix missing append of `repositories` when using --data-dirs (#360)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Brian C. Lane
    - many: update all refs to Fedora 43 (#362)
      - Author: Ondřej Budai, Reviewers: Achilleas Koutsou, Michael Vogt, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-12


author: Packit <hello@packit.dev> - 42-1
changelog:
  Changes with 42
  ----------------
    - Fix release action (#368)
      - Author: Simon Steinbeiß, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Michael Vogt
    - build(deps): bump actions/checkout from 5 to 6 (#381)
      - Author: dependabot[bot], Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#382)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - ci: split gobump into two PRs (#371)
      - Author: Lukáš Zapletal, Reviewers: Michael Vogt, Simon de Vlieger
    - cmd: modify success message to include image path (#377)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    - doc/installation: mention RHEL 9.7 and 10.1 (#378)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal, Tomáš Hozza
    - doc: additional information on `ostree` (HMS-9741) (#373)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - doc: document `bootc` specifics (HMS-9740) (#375)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt, Tomáš Hozza
    - github: disable gomod updates with dependabot (#372)
      - Author: Achilleas Koutsou, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - go.mod: move to images v0.218 (#370)
      - Author: Michael Vogt, Reviewers: Sanne Raymaekers, Simon de Vlieger
    - go.mod: move to images v0.223 (#383)
      - Author: Ondřej Budai, Reviewers: Michael Vogt, Simon de Vlieger
    - main: add `--bootc-defaultfs` option (#324)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger
    - many: metrics option for stage durations (#317)
      - Author: Lukáš Zapletal, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-11-26


author: Packit <hello@packit.dev> - 43-1
changelog:
  Changes with 43
  ----------------
    - Containerfile: add subscription-manager (#390)
      - Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    - bib: drop inContainerOrUnknown() and use setup.IsContainer() (#395)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - chore: bump dependencies via gobump (#389)
      - Author: SchutzBot, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - chore: bump dependencies via gobump (#394)
      - Author: SchutzBot, Reviewers: Achilleas Koutsou, Lukáš Zapletal
    - cmd: make bootc-image-builder a multi-call binary of ibcli (HMS-9808) (#374)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Lukáš Zapletal, Simon de Vlieger, Tomáš Hozza
    - cmd: move the "upload" comand from bib here (#396)
      - Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    - deps: update images to 0.228.0 (#393)
      - Author: Simon de Vlieger, Reviewers: Achilleas Koutsou, Michael Vogt
    - docs: add a note about satellite (#385)
      - Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Simon de Vlieger
    - go.mod: move to images v0.226.0 (#384)
      - Author: Michael Vogt, Reviewers: Anna Vítová, Simon de Vlieger
    - main: add `{supported,required}` bp options to describe-image (#376)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger
    - main: rename `data-dir` to `force-data-dir` (#386)
      - Author: Simon de Vlieger, Reviewers: Brian C. Lane, Lukáš Zapletal
    - readme: new `--force-data-dir` (#387)
      - Author: Simon de Vlieger, Reviewers: Lukáš Zapletal, Michael Vogt
    - repos: force data is an override (#388)
      - Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    - test: add test for subscribed content (#391)
      - Author: Michael Vogt, Reviewers: Lukáš Zapletal, Simon de Vlieger

  — Somewhere on the Internet, 2025-12-10


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.17.4-0]
changelog:
  - Add Fedora 42 and 41 to release_targets (Justin M. Forbes)
  - RHEL_RELEASE should be 0, not 1 (Justin M. Forbes)
  - PCI: vmd: override irq_startup()/irq_shutdown() in vmd_init_dev_msi_info() (Inochi Amaoto)
  - fedora: arm64: Updates for AMD Xilinx devices (Peter Robinson)
  - Fix up config issue due to stable backport (Justin M. Forbes)
  - Linux v6.17.4


author: Augusto Caringi <acaringi@redhat.com> [6.17.8-0]
changelog:
  - rust: kbuild: workaround `rustdoc` doctests modifier bug (Miguel Ojeda)
  - rust: kbuild: treat `build_error` and `rustdoc` as kernel objects (Miguel Ojeda)
  - Linux v6.17.8


author: Augusto Caringi <acaringi@redhat.com> [6.17.10-0]
changelog:
  - Revert "gpio: swnode: don't use the swnode's name as the key for GPIO lookup" (Justin M. Forbes)
  - Linux v6.17.10


author: Augusto Caringi <acaringi@redhat.com> [6.17.11-0]
changelog:
  - Fix up config issue related to CONFIG_SCHED_PROXY_EXEC (Augusto Caringi)
  - Prepare for F41 EOL (Justin M. Forbes)
  - Linux v6.17.11


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.4-1
changelog:
  - Update to release v1.33.4
  - Resolves: rhbz#2388412
  - Fixes CVE-2025-5187: Nodes can delete themselves by adding an
    OwnerReference
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-2
changelog:
  - Drop conntrack requirement
  - Resolves: rhbz#2392421
  - Drops conntrack dependency
  - Corrects README version


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.5-3
changelog:
  - Remove iproute, iproute-tc, ethtool dependencies
  - Resolves: rhbz#2396543
  - Consistent with changes to upstream
  - See also https://github.com/kubernetes/release/pull/4106
  - Update .gitignore to include src rpm.
  - Add kubernetes-cni requirement to kubelet consistent with upstream
  - Change containernetworking-plugins name to kubernetes-cni. There can be
    multiple kubernetes-cni providers


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-1
changelog:
  - Update to release v1.33.6
  - Resolves: rhbz#2398588, rhbz#2398849, rhbz#2399250, rhbz#2399523
  - Resolves: rhbz#2407789, rhbz#2408059, rhbz#2408316, rhbz#2408610
  - Resolves: rhbz#2408673, rhbz#2408731, rhbz#2409238, rhbz#2409528
  - Resolves: rhbz#2409789, rhbz#2410203, rhbz#2410478, rhbz#2410739
  - Resolves: rhbz#2411118, rhbz#2411377, rhbz#2412570, rhbz#2412589
  - Resolves: rhbz#2412804
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-2
changelog:
  - Reorder CRI Recommends
  - Update cri-o recommend with correct version information
  - Reorder CRI as (for example): Recommends:  (cri-o1.34 or containerd)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.33.6-3
changelog:
  - Drop deprecated --fail-swap-on=false flag
  - Drop flag from kubeadm systemd drop-in file
  - Remove deprecated flags and comment out EnvironmentFiles


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.0-1
changelog:
  - Release v1.34.0
  - Resolves: rhbz#2391352
  - Urgent Upgrade Notice at https://github.com/kubernetes/kubernetes/blob/ma
    ster/CHANGELOG/CHANGELOG-1.34.md#urgent-upgrade-notes
  - Significant fixes and new features
  - Spec file clean up over v1.33 removing obsolete references
  - gocheck still a work in progress


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.2-1
changelog:
  - Update to release v1.34.2
  - Resolves: rhbz#2398589, rhbz#2398850, rhbz#2399251, rhbz#2399524
  - Resolves: rhbz#2407790, rhbz#2408060, rhbz#2408317, rhbz#2408611
  - Resolves: rhbz#2408674, rhbz#2408732, rhbz#2409239, rhbz#2409529
  - Resolves: rhbz#2409790, rhbz#2410204, rhbz#2410479, rhbz#2410740
  - Resolves: rhbz#2411120, rhbz#2411378, rhbz#2411636 rhbz#2412590
  - Resolves: rhbz#2412805
  - Upstream fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 1.34.3-1
changelog:
  - Update to release v1.34.3
  - Resolves: rhbz#2420902
  - Upstream fixes h Please enter the commit message for your changes. Lines
    starting


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.3.0
changelog:
  - Support for UV retrievable secrets
  - Handle CCA cipher key token with Encrypted V0 payload
  - bug fixes


author: Holger Dengler <dengler@linux.ibm.com> - 1.4.0-1
changelog:
  - Upgrade to new upstream version 1.4.0
  - Support for MSA 10 (XTS-FULL) and MSA 11 (HMAC)
  - Bug fixes


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.0-1
changelog:
  - Update to 1.23.0
  - Security fixes for CVE-2024-8946, CVE-2024-8947, CVE-2024-8948
  Resolves: rhbz#2312926, rhbz#2312923, rhbz#2312921


author: Charalampos Stratakis <cstratak@redhat.com> - 1.25.0-1
changelog:
  - Update to 1.25.0
  - Security fixes for CVE-2023-52353 and CVE-2024-23744 in mbedtls
  - Fix FTBFS with GCC 15
  Resolves: rhbz#2359781, rhbz#2259505, rhbz#2259499, rhbz#2340849


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-10
changelog:
  - Backport fixes for CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVE-2025-32906
    CVE-2025-32907 CVE-2025-32909


author: Sandro Mani <manisandro@gmail.com> - 2.74.3-12
changelog:
  - Backport fixes for CVE-2025-4476, CVE-2025-4948, CVE-2025-4969,
    CVE-2025-46420, CVE-2025-46421, CVE-2025-4945


author: Stefan Becker <chemobejk@gmail.com> - 2.10-1
changelog:
  - Rebase to upstream version 2.10 (rhbz#2208236)
  - Add patch to fix baudrate setting on F43+ (rhbz#2407160)


author: Dominik Mierzejewski <dominik@greysector.net> - 2.5.3-2
changelog:
  - Use generic build dependencies
  - Stop disabling precompiled headers, it was fixed in 2.4.0
  - Stop turning compiler warnings into errors
  - Adjust FAAD2 build-and runtime requirements to -libs only
  - Review licenses and use SPDX identifiers


author: Bradley G Smith <bradley.g.smith@gmail.com> - 28.5.2-1
changelog:
  - Update to release v28.5.2
  - Resolves: rhbz#2412743
  - Incorporates runc v1.3.3
  - Upstream bug fixes


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-1
changelog:
  - Update to release v29.0.0
  - Upstream note: "This release includes several breaking changes and
    deprecations. Review the release notes carefully before upgrading."


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.0-2
changelog:
  - Amend tests in %check
  - Expand tests found in submodules using -F parameter to gocheck2
  - v29.0.0 changes  Co-authored-by: Maxwell G <maxwell@gtmx.me>


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.0.2-2
changelog:
  - Remove flaky tests from %check
  - TestSCTP6Proxy is flaky on x86_64 arch - usually working but sometimes
    not
  - TestSCTP6ProxyNoListener often fails on ppc64le (rawhide)


author: Bradley G Smith <bradley.g.smith@gmail.com> - 29.1.3-1
changelog:
  - Update to release v29.1.3
  - Resolves: rhbz#2417969
  - Resolves CVE-2024-25621: rhbz#2419019, rhbz#2419046, rhbz#2419442
  - Upstream new features and fixes


author: Pavel Raiskup <praiskup@redhat.com> 5.7-1
changelog:
  - hermetic: new mode to do fully-offline builds
  - new --scrub-all-chroots option
  - make "dnf4" equivalent to "dnf"
  - chroot_scan: create result directory with appropriate permissions
  - chain: No need to re-create resultdir
  - de-duplicate the local-repo mountpoint in bootstrap
  - respect `nspawn_args` whenever `doChroot` is called
  - ensure --addrepo option also affects bootstrap
  - de-duplicate two opinionated doChroot() calls
  - show ccache stats at the end of the build (brian@interlinx.bc.ca)
  - add `debug` option to the ccache plugin (belegdol@fedoraproject.org)
  - add runtime dependency on fuse-overlayfs (frostyx@email.cz)
  - skip the "podman pull" for bootstrap when not needed
  - package_state: the installed_pkgs.log file now covers dynamic builddeps
  - don’t ship rpmautospec plugin with main package (nils@redhat.com)
  - clean up of macros referencing rhel7 (msuchy@redhat.com)
  - enable RPM sysusers integration (j1.kyjovsky@gmail.com)
  - add hashdir option to ccache plugin (belegdol@fedoraproject.org)
  - own /usr/share/doc/mock (msuchy@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 5.8-1
changelog:
  - chroot_scan: make sure the tarball is owned by non-priv user
  - chroot_scan: use util.do to display command in --verbose
  - chroot_scan: correctly create the result directory


author: Pavel Raiskup <praiskup@redhat.com> 6.0-1
changelog:
  - export_buildroot_image: new plugin for OCI image exports
  - buildroot_image: allow using OCI images as the base for buildroot
  - hermetic: do not install buildroot via DNF
  - podman: typofix in library call error-message
  - use new digest for comparing podman images (tkopecek@redhat.com)
  - hermetic: do "podman pull" instead of "podman load" for bootstrap
  - podman: always tag/untag the images we work with locally
  - podman: generalize the logic so it is not bootstrap-only
  - avoid using the %pre scriptlet if possible
  - hermetic: retry on failed network requests (rbean@redhat.com)
  - hermetic: more robust retry mechanism for downloading rpms (tkopecek@redhat.com)
  - chroot_scan: bugfix - create chroot_scan/ correctly in buildroot.resultdir
  - mock: drop the unused create_default_route_in_container.sh script
  - mock: make --dnf-cmd compatible with DNF5 (frostyx@email.cz)
  - mock: add a real source URL into %Source
  - the dnf_builddep_opts made working again (addisu@openrobotics.org)


author: Miroslav Suchý <msuchy@redhat.com> 6.1-1
changelog:
  - bootstrap: automatically bind-mount local --additional-package
    (praiskup@redhat.com)
  - tests: do not try to build mock.src.rpm against navy-* (praiskup@redhat.com)
  - hermetic: more image-pedantic work with bootstrap (praiskup@redhat.com)
  - doc: --config-opts single-item array wants second to be blank
    (mail@evangoo.de)


author: Pavel Raiskup <praiskup@redhat.com> 6.2-1
changelog:
  - disable copying ca-trust dirs with Azure Linux 3 (reubeno@users.noreply.github.com)
  - bail clearly when image pull fails (awilliam@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.3-1
changelog:
  - lockfile: don't hard-code DNF _bindir location, use config_opts
  - fix sysusers packaging once more
  - ProcessPoolExecutor changed behaviour with Python 3.14 (msuchy@redhat.com)
  - feat: plugin: hw_info: added human-readable flag for memory info (k0ste@k0ste.ru)
  - Remove the traceLog decorator from pretty_getcwd (ferdnyc@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.4-1
changelog:
  - add unbreq plugin for detection of unused BuildRequires (marian.koncek@mailbox.org)
  - set module_hotfixes=true for --addrepo repositories (andreas.rogge@bareos.com)
  - added options to /bin/mock-hermetic-repo support for client certificates (scoheb@gmail.com)
  - use "systemd-nspawn --suppress-sync=yes" when available (msuchy@redhat.com)
  - buildroot_lock: call repoquery as a privileged user
  - buildroot_lock: better error reporting
  - fix unclosed file warning (pastalian46@gmail.com)


author: Pavel Raiskup <praiskup@redhat.com> 6.6-1
changelog:
  - Make sure to install BuildRequires defined by macros (frostyx@email.cz)
  - unbreq plugin: performs action only when build is taking place (marian.koncek@mailbox.org)
  - simplify forcearch code


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.8-2
changelog:
  - Fix memleak in XmString from:
    https://sourceforge.net/p/motif/code/merge-requests/10/
  - Add NET_WORKAREA and GTK_WORKAREAS support from:
    https://sourceforge.net/p/motif/code/merge-requests/11/


author: Jerry James <loganjerry@gmail.com> - 0.9.0-3
changelog:
  - The devel package should Require flint-devel
  - Adapt to upstream changes in how headers are installed


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.2.16-4
changelog:
  - Change private key cipher to aes-256-cbc
  - Remove obsolete system V conditionals in the specfile
  - Move user/group creation logic to sysusers.d fragments


author: Richard Russon <rich@flatcap.org> - 20241212-1
changelog:
  - Features
    - #4437 show message preview in compose view
    - #4439 add trailing commas when editing addresses
  - Bug Fixes
    - #4444 expando: fix overflow
    - #4461 Spaces can be wide
    - #4464 Remove BOM from UTF-8 text
    - #4467 Bug with wrong fingerprints in certificate_file
    - #4470 fix postponed sorting assertion failure
    - #4472 fix: `save_attachment_open()` when overwriting
    - #4473 add text-wrapping to compose message preview pager
    - #4475 edit_headers: cleanup temporary file on error
    - expando: fix crash on empty '[]' date
    - expando: fix container formatting
    - browser: fix 'tag-' display
    - query: fix memory leak
    - fix more arrow_cursor + search
  - Changed Config
    - Config Renames:
      - `$pgp_sort_keys`       -> `$pgp_key_sort`
      - `$sidebar_sort_method` -> `$sidebar_sort`
      - `$sort_alias`          -> `$alias_sort`
      - `$sort_browser`        -> `$browser_sort`
    - Changed Defaults:
      - `set alias_format = "%3i %f%t   | %C%> %Y"`
      - `set query_format = "%3i %t   | %C%> %Y"`
  - Translations
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
    - 89% French
    - 39% Chinese (Traditional)
  - Coverity Defects
    - Explicit null dereferenced
    - Overflowed constant
    - Overflowed return value
    - Resource leak
  - Docs
    - alias tags
  - Build
    - #4452 only use `struct tm.tm_gmtoff` if available
  - Code
    - #4294 refactor memory allocation
    - #4442 remove unused fields from ComposeSharedData
    - #4447 refactor 'sort' constants
    - #4449 add `mutt_window_swap()`
    - unify Menu data
    - move config to libraries
    - unify Alias/Query
    - expando factor out callbacks
    - refactor `simple_dialog_new()`
    - test: add `TEST_CHECK_NUM_EQ()`
    - fopen: tidy read-only
  - Upstream
    - #4448 Update queue.h


author: Richard Russon <rich@flatcap.org> - 20250113-1
changelog:
  - Bug Fixes
    - #4477 fix crash in folder-hook
    - #4480 fix memory leak in compose message preview (fixes #4478)
    - #4483 query: fix comma-separated names
    - #4485 lua: fix `lua_mutt_call()`
    - #4490 notmuch: refresh the Email if the filename changes
    - fix: no new mail message
    - fix display of certificate fingerprints
    - fix prompt colour
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovakian
    - 100% Turkish
    - 91% French
    - 41% Chinese (Traditional)
  - Build
    - #4479 Fix DT_NUMBER entries on 32-bit endian platforms
  - Code
    - #4481 Simplify `mutt_file_fopen()`
    - colour refactoring
    - standardise variable names for temporary files


author: Richard Russon <rich@flatcap.org> - 20250404-1
changelog:
  - Features
    - #4493 config: don't quote enums
    - #4493 link config dump to docs
    - #4494 refactor the Help Page for clarity
    - #4554 CLI: `neomutt -DD` -- Dump Different
    - #4593 browser: tag select rather than descend
  - Bug Fixes
    - #3469 source: fix variable interpretation
    - #4370 `mutt_oauth2`: refactor `sasl_string` computation
    - #4536 expand tabs to spaces in compose preview
    - #4537 fix dumping of initial values
    - #4538 move `real_name` init
    - #4542 Remove `MUTT_NEWFOLDER`, fix appending to mbox
    - #4546 Respect Ignore when modifying an email's headers
    - #4549 fix refresh on toggle `hide_thread_subject`
    - #4550 buffer: fix seek
    - #4551 add comma to single `<complete-query>` match
    - #4595 notmuch: check for parse failure
    - #4596 query: allow `<>`s around email addresses
    - pager: fix normal/stripe colour
    - fix colour leaks in pager
    - fix array leak in the verify certificate dialog
  - Translations
    - 100% German
    - 100% Turkish
    - 96% Lithuanian
    - 86% French
    - 49% Chinese (Traditional)
  - Build
    - #4552 Deprecate some configure options that aren't used anymore
    - build: workaround for unused-result warning
  - Code
    - #4492 colour refactoring
    - #4543 debug: Chain old SEGV Handler
    - #4545 Allow nested `ARRAY_FOREACH()`
    - #4553 config: API `has_been_set()`
    - #4557 config: drop ConfigSet from API functions
    - #4558 drop obsolete pgp/smime menus
    - #4559 array: `foreach_reverse()`
    - #4560 Change description of verify-key to be crypto-scheme agnostic
    - #4561 expando: move EnvList out of library
    - #4570 Simplify the management of NeoMutt Commands
    - #4571 libcli - parse the command line
    - #4580 Split CLI Usage into sections
    - #4582 pager: fix lost `NT_PAGER` notifications
    - #4591 pager: fix refresh on config/colour changes
    - array: upgrade `get_elem_list()`
    - Buffer refactoring
    - coverity: fix defects
    - improve `localise_config()`
    - main: drop -B (batch mode) option
    - merge init.[ch] into main.c
    - refactor version code
    - neomutt: `home_dir`, `username`, `env`
    - query: unify NeoMutt `-D` and `-Q`
    - refactor `main.c`/`init.c`
    - sidebar: streamline expando callbacks
    - test: lots of parse coverage
    - window refactoring
    - window: force recalc|repaint on new windows
  - Upstream
    - Update mutt/queue.h
    - Fix NULL pointer dereference when calling `imap_logout_all()`


author: Richard Russon <rich@flatcap.org> - 20250510-1
changelog:
  - Contrib
    - #4616 Fix gpg-json output
  - Bug Fixes
    - #4600 main: don't stop if /var/spool/mail is missing
    - #4602 color: fix quoted maths
    - #4604 Don't consider "weed" when writing an email to file
    - #4605 help: fix leaks
    - #4612 imap: check for incomplete Mailboxes on sync
    - #4622 fix label completion crash
  - Translations
    - #4622 update Esperanto translation
    - Update lt_LT translations
  - Docs
    -  docs: fix broken functions
  - Build
    - #4607 Check for DocBook XSL
    - #4618 Build and test on FreeBSD


author: Richard Russon <rich@flatcap.org> - 20250905-1
changelog:
  - Security
    - #4623 ncrypt/crypt.c: Protect Message-ID
  - Features
    - #4644 Provide an option to confirm on an empty To
  - Contrib
    - #4645 Add ayu-dark-256 colorscheme
  - Bug Fixes
    - #4635 Handle a non-existing message_cache_dir
    - #4642 Decouple `$crypt_encryption_info` and `$crypt_protected_headers_weed` from `$devel_security`
    - #4650 Return success after querying for config
  - Changed Config
    - Add: `confirm_empty_to = no`
    Confirm when sending an e-mail with an empty To:
  - Translations
    - 100% German
    - 100% Turkish
    - 99% Hungarian
    - 98% Lithuanian
    - 89% French
  - Build
    - #4636 Update FreeBSD CI and workaround `pkg` bug
    - actions: use checkout v5
  - Code
    - #4023 tweak observer event types
    - #4628 Use the standard countof instead of our mutt_array_size()
    - #4637 Update types in test dummy code
    - #4638 remove useless const qualifier from log_queue_get()
    - #4655 Make sure ctype(3) function arguments are valid
    - #4657 Fix warning about unused function and data
    - #4659 Include term.h and [n]curses.h consistently


author: Richard Russon <rich@flatcap.org> - 20251211-1
changelog:
  - Security
    - #4725	deprecate old ssl and tls options
  - Features
    - #4718	add `$message_id_format`
    - Notmuch: hide some old/deprecated features
  - Bug Fixes
    - #4666	limit: force refresh of index bar
    - #4671	Update the status bar on thread [un]collapse
    - #4673	shrink history file on every new entry
    - #4679	Flush S/MIME passkey on failure to sign
    - #4684	execute message-hook sooner
    - #4687	fix: exec auto-completion
    - #4688	Fix infinite loop in GnuTLS socket I/O when socket blocks
    - #4696	`cmd_parse_fetch()`: debug: avoid NULL dereference
    - #4697	expunge: guard against segfault
    - #4719	alias: complete when only one match
    - #4721	browser: fix select/descend folder/mailbox
    - #4726	imap: protect against crash on shutdown
    - fix resolve for tagged save
    - help: fix sorting of unbound functions
    - help: hide deprecated functions
  - Changed Config
    - New: `message_id_format = "<%z@%f>"`
    - Deprecated `ssl_use_sslv2`
    - Deprecated `ssl_use_sslv3`
    - Deprecated `ssl_use_tlsv1`
    - Deprecated `ssl_use_tlsv1_1`
  - Translations
    - 100% Esperanto
    - 100% Lithuanian
    - 100% Serbian
    - 100% Turkish
  - Docs
    - #4665	Revamp the S/MIME docs
    - #4680	Document how to use S/MIME with GPGMe
    - #4692	update the contribution guidelines
    - fix deprecated $pager example
    - lots man pages fixes
    - update help for sort options
  - Build
    - #4668	fix build for re-entrant ncurses
    - #4727	make openssl/gnutls mutually exclusive
    - libkey: light refactoring
    - lua: create liblua
  - Code
    - #4695	Replace some `TAILQ` uses with `ARRAY`
    - convert the ctype wrappers to use `bool`
    - global invert `OptNoCurses` to `OptGui`
    - key: collapse redirector functions
    - move `km_init()` earlier in startup
    - opcodes: add flags to `MenuFuncOp`
    - pass focused window to global functions
    - Use `buf_at()` to get a char from a `Buffer`
    - use `StringArray` everywhere


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 31.0.9-1
changelog:
  - 31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842
    RHBZ#2389843 RHBZ#2389814 RHBZ#2389815


author: Gabriel Somlo <gsomlo@gmail.com> - 1-51.20250211gite4115e8
changelog:
  - remove cmake reference to tests submodule (to avoid having to pull it in)
  - update to newer snapshot


author: Stefano Brivio <sbrivio@redhat.com> - 0^20250606.g754c6d7-1
changelog:
  - Depend on SELinux tools and policy version, drop circular dependency
  - Call %selinux_modules_* macros only once
  - Separately restore context for /run/user in %posttrans selinux
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_05_12.8ec1341..2025_06_06.754c6d7


author: Stefano Brivio <sbrivio@redhat.com> - 0^20250611.g0293c6f-1
changelog:
  - Hide restorecon(8) errors in post-transaction scriptlet
  - Add container-selinux as dependency for passt-selinux
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_06_06.754c6d7..2025_06_11.0293c6f


author: Stefano Brivio <sbrivio@redhat.com> - 0^20251209.gc3f1ba7-1
changelog:
  - Fix build on Fedora 43, selinux_requires_min not available on Copr builders
  - use %selinux_requires_min macro, drop overlapping dependencies
  - use regex instead of SELinux template
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2025_09_19.623dbf6..2025_12_09.c3f1ba7


author: Remi Collet <remi@remirepo.net> - 12.3.5-1
changelog:
  - update to 12.3.5
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on sebastian/environment 8.0


author: Remi Collet <remi@remirepo.net> - 12.5.0-1
changelog:
  - update to 12.5.0
  - raise dependency on nikic/php-parser 5.6.1
  - raise dependency on theseer/tokenizer 1.3.1


author: Remi Collet <remi@remirepo.net> - 12.5.1-1
changelog:
  - update to 12.5.1
  - raise dependency on nikic/php-parser 5.7.0
  - raise dependency on theseer/tokenizer 2.0.1
  - add upstream patch for theseer/tokenizer 2.x


author: Remi Collet <remi@remirepo.net> - 2.0.1-1
changelog:
  - update to 2.0.1
  - rename to php-theseer-tokenizer2
  - install /usr/share/php/TheSeer/Tokenizer2
  - raise dependency on PHP 8.1


author: Remi Collet <remi@remirepo.net> - 3.2.2-1
changelog:
  - update to 3.2.2
  - re-license spec file to CECILL-2.1
  - raise dependency on php 7.2
  - switch to phpunit11


author: Remi Collet <remi@remirepo.net> - 12.3.14-1
changelog:
  - update to 12.3.14 (no change)
  - raise dependency on sebastian/exporter 7.0.2
  - raise dependency on phpunit/php-code-coverage 12.3.8
  - raise dependency on sebastian/cli-parser 4.2.0


author: Sandipan Roy <sandipan@fedoraproject.org> - 1.12-2
changelog:
  - Migrate to pyproject macros (replacing deprecated \
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  build --executable="/usr/bin/python3 -sP" 
  /\
    CFLAGS="${CFLAGS:-${RPM_OPT_FLAGS}}" LDFLAGS="${LDFLAGS:-${RPM_LD_FLAGS}}"\
    /usr/bin/python3 setup.py  install -O1 --skip-build --root /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT --prefix /usr 
    rm -rfv /builddir/build/BUILD/python-advisory-parser-1.12-build/BUILDROOT/usr/bin/__pycache__
  )


author: Jakub Kadlcik <frostyx@email.cz> 1.132-1
changelog:
  - Discourage from deleting objects while paginating over them
  - Suggest pagination only when a GET request timeouts


author: Jakub Kadlcik <frostyx@email.cz> 2.2-1
changelog:
  - Stop using deprecated %py3_build/%py3_install macros
  - Remove rhel7 conditions and remove python2 support


author: Jakub Kadlcik <frostyx@email.cz> 2.3-1
changelog:
  - Use correct used HTTP methods for delete and update requests
  - Introduce v3.requests.DELETE method


author: Pavel Raiskup <praiskup@redhat.com> 0.22-1
changelog:
  - fix misleading warning for non-copr library consumers
  - add `contextlib.nullcontext` function as EL8 compat
  - limit stdout/stderr of ssh.run_expensive() commands
  - use 'copr-common/<version>' as http user agent identifier
  - changes needed to allow user SSH to builders


author: Jakub Kadlcik <frostyx@email.cz> 1.2-1
changelog:
  - Specify reason for running createrepo
  - Improve robustness and cooperation between backend and rpmbuild
  - Remove license classifier
  - Modernize specfile using pyproject macro


author: Packit <hello@packit.dev> - 0.32.2-1
changelog:
  - all templates: Drop wrong variant wrapping from all properties
  - tests: Skip TestNetworkManager::test_one_wifi_with_accesspoints with NM ≥ 1.49.3


author: Packit <hello@packit.dev> - 0.33.0-1
changelog:
  - templates: Add gsd-rfkill (thanks Guido Günther)
  - Allow adding objects derived from DBusMockObject (thanks Sebastian Wick)
  - Drop Python <= 3.7 support (thanks Tomasz Kłoczko)


author: Packit <hello@packit.dev> - 0.35.0-1
changelog:
  - modemmanager: Add operator code (thanks Guido Günther)
  - modemmanager: Allow to set CellBroadcast channel list (thanks Guido Günther)


author: Packit <hello@packit.dev> - 0.36.0-1
changelog:
  - mockobject: Fix _wrap_in_dbus_variant for Struct and Dict types (thanks Sebastian Wick)
  - Drop setup.{cfg,py} and RHEL 9 support, move to pybuild (rhbz#2377609)
  - Drop iio-sensor-proxy tests, the template is broken (see #241)


author: Packit <hello@packit.dev> - 0.37.0-1
changelog:
  - templates: Drop iio-sensors-proxy (See #241)
  - DBusTestCase: Drop obsolete {start,stop}_dbus() methods
  - Fix dbus-daemon startup race condition (Debian#1109272)


author: Michel Lind <salimma@fedoraproject.org> - 4.2.14-1
changelog:
  - Update to 4.2.14 to address multiple CVEs
  - resolves CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, CVE-2024-39614


author: Michel Lind <salimma@fedoraproject.org> - 4.2.20-1
changelog:
  - Update to version 4.2.20; Fixes: RHBZ#2350882
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 4.2.22-1
changelog:
  - Update to version 4.2.22
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path
  - Revert setuptools bump; we don't need it and don't have the needed
    version
  - Rebase Python 3.13 patch


author: Michel Lind <salimma@fedoraproject.org> - 4.2.27-1
changelog:
  - Update to version 4.2.27
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (4.2.26)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (4.2.25)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (4.2.25)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (4.2.24)


author: Michel Lind <salimma@fedoraproject.org> - 5.1.7-1
changelog:
  - Update to version 5.1.7; Fixes: RHBZ#2350881
  - Fix for CVE-2025-26699: Potential denial-of-service vulnerability in
    django.utils.text.wrap()


author: Michel Lind <salimma@fedoraproject.org> - 5.1.8-1
changelog:
  - Update to 5.1.8
  - On Windows, this fixes CVE-2025-27556. Mentioning for compleness
  - Fixes a regression in Django 5.1.7 affecting
    LogEntryManager.log_actions() - #36234
  - Remove legacy symlinks


author: Michel Lind <salimma@fedoraproject.org> - 5.2.2-1
changelog:
  - Update to 5.2.2
  - Fixes CVE-2025-32873: Denial-of-service possibility in strip_tags()
  - Fixes CVE-2025-48432: Potential log injection via unescaped request path


author: Michel Lind <salimma@fedoraproject.org> - 5.2.4-1
changelog:
  - Update to version 5.2.4
  - Skip test_strip_tags and test_parsing_errors on Python 3.14; Fixes:
    RHBZ#2374042


author: Michel Lind <salimma@fedoraproject.org> - 5.2.9-1
changelog:
  - Update to version 5.2.9
  - Fixes CVE-2025-13372: Potential SQL injection in FilteredRelation column
    aliases on PostgreSQL
  - Fixes CVE-2025-64460: Potential denial-of-service vulnerability in XML
    Deserializer
  - Fixes CVE-2025-64459: Potential SQL injection via _connector keyword
    argument (5.2.8)
  - Fixes CVE-2025-59681: Potential SQL injection in QuerySet.annotate(),
    alias(), aggregate(), and extra() on MySQL and MariaDB (5.2.7)
  - Fixes CVE-2025-59682: Potential partial directory-traversal via
    archive.extract() (5.2.7)
  - Fixes CVE-2025-57833: Potential SQL injection in FilteredRelation column
    aliases (5.2.6)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1:2.41.1-2
changelog:
  - Migrate to pyproject-rpm-macros (fix RHBZ#2377753)
  - Add missing extras metapackages
  - Run the tests


author: Packit <hello@packit.dev> - 0.54.0-1
changelog:
  - Support for Forgejo pull requests has been added. (#925)
  - We have added support for Forgejo methods related to permissions. (#918)
  - Resolves: rhbz#2365296


author: Packit <hello@packit.dev> - 0.56.0-1
changelog:
  - Tmt documentation has been extended. (#937)
  - Support for forgejo commit statuses has been added. (#936)
  - The package ogr/abstract has been split into multiple files. (#935)
  - Resolves: rhbz#2389723


author: Packit <hello@packit.dev> - 0.56.1-1
changelog:
  - We now use httpx when making requests from our Forgejo implementation. (#941)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.57.0-1
changelog:
  - We have fixed an issue with the new Forgejo version preventing ogr from working. (#949)
  - Resolves: rhbz#2401236


author: Packit <hello@packit.dev> - 0.58.0-1
changelog:
  - `PagureService` now accepts an optional `user_agent` argument to set a custom User-Agent header. (#953)
  - It is now possible to pass a `headers` argument in `PagureProject.get_file_content`. The default header is set to `Accept: text/plain`. (#954)
  - Resolves: rhbz#2420049


author: Packit <hello@packit.dev> - 0.59.0-1
changelog:
  - Improved handling of retries after errors to avoid hitting rate limits if possible. (#958)
  - `GithubPullRequest.labels` property is now cached for better performance and to be consistent with other services. (#960, #961)
  - Resolves: rhbz#2422233


author: Adam Williamson <awilliam@redhat.com> - 2.0.2-13
changelog:
  - Backport PR #47 to drop use of (and undeclared dep on) six
  - Backport PR #49 to drop unused footgun pam.py


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0
  - Add numactl-devel as a dependency since it is required by qatlib 24.09.0


author: Giovanni Cabiddu <giovanni.cabiddu@intel.com> - 25.08.0-1
changelog:
  - Update to qatlib 25.08.0
  - Add autoconf-archive as a dependency
  - Remove fix-systemd-path.patch as fix is present on the upstream project
  - Add update_sample to qatlib-tests
  - Add manpage for cpa_sample_code


author: Jaroslav Škarvada <jskarvad@redhat.com> - 0.0.20-2
changelog:
  - Switched to autotools build system (upstream preferred)
  - Dropped useless subpackages
  - Fixed requirement
    Resolves: rhbz#2355068


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-1
changelog:
  - Update to 6.38.00
  - Removed subpackages: root-proof, root-proof-bench, root-proof-player,
      root-proof-sessionviewer, root-sql-mysql, root-sql-odbc, root-sql-pgsql
  - New subpackages: root-geom-checker, root-gui-treemap,
      root-tree-ntuple-browse, root-histv7
  - JsMVA python (sub)module dropped from python3-root package
  - Compile minuit2 with Open MP support
  - Dropped patches: 7
  - New patches: 4


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.38.00-2
changelog:
  - Skip RPATH using -DCMAKE_SKIP_INSTALL_RPATH:BOOL=ON (replaces
    previously used root specific -Drpath:BOOL=OFF no longer available)
  - Backport fixes to python module
  - Rebuild for pythia8 8.3.16


author: Ondřej Nosek <onosek@redhat.com> - 1.68-6
changelog:
  - Patch: `pre-push-check`: bogus error - file wasn't listed
  - Patch: Fix mockbuild --srpm-mock specfile_path
  - Patch: `patch`: Execute subprocess in text mode
  - Patch: type: fix typo in requirements README.
  - Patch: `install`: add rpmbuild arguments `--with` and `--without`
  - Patch: `srpm`: man page generation fixed


author: Ondřej Nosek <onosek@redhat.com> - 1.69-1
changelog:
  - Only update the progress bar when meaningfully changed (code)
  - Don’t set up upload progress when stdout isn’t a tty (code)
  - Fix unittests for Python 3.14 (onosek)
  - `sources`: set "Accept-Encoding: identity" header on HTTP requests
    (decathorpe)
  - Accept auto-generated sources in pre-push checks (fweimer)
  - Add mock configuration option to build and srpm commands for use along with
    the srpm mock option, same as in mockbuild command. (abobrov)
  - `srpm`: man page generation fixed (onosek)
  - `install`: add rpmbuild arguments `--with` and `--without` - 541 (gleiro)
  - type: fix typo in requirements README. (gleiro)
  - `patch`: Execute subprocess in text mode (ferdnyc)
  - Fix mockbuild --srpm-mock specfile_path (wngtk)
  - `pre-push-check`: bogus error - file wasn't listed - #747 (onosek)
  - Switch to %pyproject_* macros (onosek)
  - Use the spec name to assemble src.rpm name (sergio)
  - Jenkinsfile: use local declaration instead the global (onosek)
  - `srpm`: --offline arg to prevent connecting to Koji - 600 (onosek)
  - `mockbuild`: -r argument as shortcut of --root (sergio)
  - `rhpkg mockbuild` won't show a hint with '--target' (onosek)


author: Ondřej Nosek <onosek@redhat.com> - 1.69-3
changelog:
  - Patch: Check the correct sorting of imports from now on
  - Patch: `update`: interactive editor is broken


author: John Kacur <jkacur@redhat.com> - 6.17.7-1
changelog:
  - Changed the kernel version to 6.17.7
  - changed the rteval-loads number scheme to reflect the kernel version


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Peter Jones <pjones@redhat.com> - 15.8-1
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.8-1
changelog:
  - Update to SSCG 3.0.8
  - Fix IP address handling in CA certificate SAN constraints * Add automatic
    single-IP subnet mask to IP addresses in CA name constraints * Update
    help text to show simplified IP format without subnet mask
  - Greatly expand the in-tree test suite


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.3-1
changelog:
  - Update to 4.0.3
  - Don't truncate destination files until just prior to writing.
  - Add test for file replacement
  - Use int type for POPT_ARG_NONE values to fix a bug on s390x


author: Sandipan Roy <saroy@redhat.com> - 2.2.0-1
changelog:
  - Update to sslscan 2.2.0
  - Bump bundled OpenSSL to 3.5.0 (minimum supported upstream)
  - Fixes rhbz#2330567


author: Jakub Kadlcik <frostyx@email.cz> 1.4-1
changelog:
  - Permit dnf4 to check for reboot with non-root user (riehecky@fnal.gov)
  - Add --reboot-only filter (riehecky@fnal.gov)


author: Patsy Griffin <patsy@redhat.com> - 2024a-8
changelog:
  - zic now defaults to "-b slim" to control data bloat.
    For now, build with ZFLAGS="-b fat" for backward compatibitliy.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (#2338511)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  Update to tzdata-2025b (#2354293)
    - Chile's Aysén Region moves from -04/-03 to -03 year-round,
      diverging from America/Santiago and creating a new zone
      America/Coyhaique.


author: Kleis Auke Wolthuizen <fedora@kleisauke.nl> - 8.17.1-1
changelog:
  - Update to 8.17.1
  - Resolves: rhbz#2351373
  - Migrate API documentation to gi-docgen
  - Drop dependency on python3-cairo (due to vipsprofile removal)


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.1-6
changelog:
  - adjust file locations now /usr/sbin is a symlink to /usr/bin
  - remove debugedit fix as no longer needed


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.2-2
changelog:
  - update to xen-4.19.2
    remove patches now included or superceded upstream
    remove xen*.efi.elf files to avoid debuginfo failure


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-2
changelog:
  - update to xen-4.19.3
    remove patches now included or superceded upstream
    includes patches for
    x86: Incorrect stubs exception handling for flags recovery [XSA-470,
  	CVE-2025-27465]
    x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350,
   	CVE-2024-36357]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-4
changelog:
  - Mutiple vulnerabilities in the Viridian interface [XSA-472,
          CVE-2025-27466, CVE-2025-58142, CVE-2025-58143]
  - Arm issues with page refcounting [XSA-473, CVE-2025-58144,
          CVE-2025-58145]


author: Michael Young <m.a.young@durham.ac.uk> - 4.19.3-6
changelog:
  - x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475,
          CVE-2025-58147, CVE-2025-58148]


